Task: attack_reconstruction (flaws_cloudtrail)
Prompt: Review the CloudTrail records for a session-credentialed principal that moves from storage discovery into object access against an S3 bucket. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain you reconstruct, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c8e12f-1f3f-48e0-a4e4-c8d079708", "record_id": "flaws_cloudtrail:0000000:90c8e12f-1f3f-48e0-a4e4-c8d079708", "row_index": 0, "timestamp": "2019-08-21T13:33:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c8e12f-1f3f-48e0-a4e4-c8d079708", "eventTime": "2019-08-21T13:33:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3df3130-c1ae-4fc4-a503-35a0c919fba5", "record_id": "flaws_cloudtrail:0000001:d3df3130-c1ae-4fc4-a503-35a0c919fba5", "row_index": 1, "timestamp": "2019-08-21T13:33:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3df3130-c1ae-4fc4-a503-35a0c919fba5", "eventTime": "2019-08-21T13:33:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dHMROm-VHzHFIJZMt5m-iyOE3Xl-N6_Ak_XvghZdkGf7cYp_TYRrrUARzl3-f7536n3Z6akyL7UQVThseB3MHhNGWBvkgYZm1SYI_GAmSb5C1Sz6TleCcZfbEf3Y13ct9tYkZIp7k0uBwCzR9izySaySo8xQ1sCnynCvTRi8zKpaAoJmZHe6KU5YNVeQ6-GJZwJ3O6_LaXZyNuLuqVoruYGc1mpUCvWPVuQmdIi7lQRwtyA7jjSMYGRWzznKEhZ79GafiSH7zvYTKkTLqz4PLxPk_7eBmAOJ4cj_GIcBYURz0gwucJTPaVnfpdKB-Ya-NrazCsEyhCNZt_Cmlmg9YSHj2al3TD52faVZLfEATCBuDysdGPkYrrWOavW3gJJEldiTxBT2L_GPY_9_XtbgY2DaFcv3d9zEKnSKQlPhAUiOQa2mj76ehcM5WmBUOuzI7YNnQf0jDfGpQ2jqnXJlx1DKzLxcaVamvpuXlQOgJDGZ8bjKuTTN9phx-3IyndjDCgIy8LuflIO7IDfuKmBB82RS8fBT-sv6_3xVflqnH7AyIRRJGi5AcBwm9Rwqgxpt9_IJLskMBZJJuz8FbJzpM9Kt3zfVjmBvVoPdBpKKhktwi5dFeyFEaHXykXvCkDdLvo98D00YAw0MVwMcLVaJ_viaT_t_J8E", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90c8e12f-1f3f-48e0-a4e4-c8d079708", "record_id": "flaws_cloudtrail:0000002:90c8e12f-1f3f-48e0-a4e4-c8d079708", "row_index": 2, "timestamp": "2019-08-21T13:33:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1276, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90c8e12f-1f3f-48e0-a4e4-c8d079708", "eventTime": "2019-08-21T13:33:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.8xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1c2a048-8f95-41f4-9b48-7f504765ee6fe", "record_id": "flaws_cloudtrail:0000003:c1c2a048-8f95-41f4-9b48-7f504765ee6fe", "row_index": 3, "timestamp": "2019-08-21T13:33:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1c2a048-8f95-41f4-9b48-7f504765ee6fe", "eventTime": "2019-08-21T13:33:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00f116b5-9d9a-440d-bc8a-090e035f675c", "record_id": "flaws_cloudtrail:0000004:00f116b5-9d9a-440d-bc8a-090e035f675c", "row_index": 4, "timestamp": "2019-08-21T13:33:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00f116b5-9d9a-440d-bc8a-090e035f675c", "eventTime": "2019-08-21T13:33:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1c2a048-8f95-41f4-9b48-7f504765ee6fe", "record_id": "flaws_cloudtrail:0000005:c1c2a048-8f95-41f4-9b48-7f504765ee6fe", "row_index": 5, "timestamp": "2019-08-21T13:33:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1c2a048-8f95-41f4-9b48-7f504765ee6fe", "eventTime": "2019-08-21T13:33:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00f116b5-9d9a-440d-bc8a-090e035f675c", "record_id": "flaws_cloudtrail:0000006:00f116b5-9d9a-440d-bc8a-090e035f675c", "row_index": 6, "timestamp": "2019-08-21T13:33:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00f116b5-9d9a-440d-bc8a-090e035f675c", "eventTime": "2019-08-21T13:33:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e88d7151-70aa-45e6-9417-7c2284c9bf03", "record_id": "flaws_cloudtrail:0000007:e88d7151-70aa-45e6-9417-7c2284c9bf03", "row_index": 7, "timestamp": "2019-08-21T13:33:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e88d7151-70aa-45e6-9417-7c2284c9bf03", "eventTime": "2019-08-21T13:33:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e88d7151-70aa-45e6-9417-7c2284c9bf03", "record_id": "flaws_cloudtrail:0000008:e88d7151-70aa-45e6-9417-7c2284c9bf03", "row_index": 8, "timestamp": "2019-08-21T13:33:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e88d7151-70aa-45e6-9417-7c2284c9bf03", "eventTime": "2019-08-21T13:33:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd801554-a162-49e0-8a82-8e2245fe6f1c", "record_id": "flaws_cloudtrail:0000009:5cd801554-a162-49e0-8a82-8e2245fe6f1c", "row_index": 9, "timestamp": "2019-08-21T13:33:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd801554-a162-49e0-8a82-8e2245fe6f1c", "eventTime": "2019-08-21T13:33:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cd801554-a162-49e0-8a82-8e2245fe6f1c", "record_id": "flaws_cloudtrail:0000010:5cd801554-a162-49e0-8a82-8e2245fe6f1c", "row_index": 10, "timestamp": "2019-08-21T13:33:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cd801554-a162-49e0-8a82-8e2245fe6f1c", "eventTime": "2019-08-21T13:33:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "325054d3-ea63-4b26-86a0-b717023d802", "record_id": "flaws_cloudtrail:0000011:325054d3-ea63-4b26-86a0-b717023d802", "row_index": 11, "timestamp": "2019-08-21T13:33:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "325054d3-ea63-4b26-86a0-b717023d802", "eventTime": "2019-08-21T13:33:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "325054d3-ea63-4b26-86a0-b717023d802", "record_id": "flaws_cloudtrail:0000012:325054d3-ea63-4b26-86a0-b717023d802", "row_index": 12, "timestamp": "2019-08-21T13:33:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "325054d3-ea63-4b26-86a0-b717023d802", "eventTime": "2019-08-21T13:33:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f65dd5f-b21f-4395-8ae2-b50a39e0cbce", "record_id": "flaws_cloudtrail:0000013:7f65dd5f-b21f-4395-8ae2-b50a39e0cbce", "row_index": 13, "timestamp": "2019-08-21T13:33:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f65dd5f-b21f-4395-8ae2-b50a39e0cbce", "eventTime": "2019-08-21T13:33:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f65dd5f-b21f-4395-8ae2-b50a39e0cbce", "record_id": "flaws_cloudtrail:0000014:7f65dd5f-b21f-4395-8ae2-b50a39e0cbce", "row_index": 14, "timestamp": "2019-08-21T13:33:08Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f65dd5f-b21f-4395-8ae2-b50a39e0cbce", "eventTime": "2019-08-21T13:33:08Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34a7b77-5786-4489-80ff-32dd883c4cca", "record_id": "flaws_cloudtrail:0000015:c34a7b77-5786-4489-80ff-32dd883c4cca", "row_index": 15, "timestamp": "2019-08-21T13:33:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34a7b77-5786-4489-80ff-32dd883c4cca", "eventTime": "2019-08-21T13:33:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: jmd-EL80bTrYYNjqzFyZpEoIZRcPTK2tY1B_MpFFfa4RJPJ_QcXFjrVeNo8hKLhJdLjuOuHlQ32SfuvMcWhnLLJLftIrIpX0dGsFt1tCEirylspzTXkaDoOE59n4mjKgcIIl3w8IUYGBTg9CJFAzbRI7IHoUmDZVkXeAJTqPfXfFArvmlaouftdtfOPwTJd5bh2t1RVPWXViHegncZpnpwJVfIxHJUMGHUgiMyge3WSoa2BInXBSrweWCyVKCOLsPEX9WoQ_fBTFKh3iP1SbxRLV8FMOd0jOPVLywor9vTogOnKnXNycen9bbSRgGEVyOgr7bJ6M4sK4ovmgotZEfvZHQt4u1nQpWIMDv-ZuLHQ_YK-xXhD8Jm8-gHKOUng4cs_b8trOA1DMOaerCmceUbuR7yA5LIp8wmryu0PrVywBPBaD6iAdFmFLoVMzNOYY9FZdwaXBycfU6NBkmsO7Ppi9HEpsC615BM2osDI2ULqfBF7VhUb82vHItD708PjhIlhaxq4wtttSXuuYhO-b7-rdxpK85aog2y0pce8-oIc4NM4uey7MGhuUmkL82usWB6Y5NHiKTa-_48LNs6B425h_zJ9XlJ2Ps0s_h0B1xkoTobxqVMRZeW3M1eBXqaheE5RQ-mDtcQTFebdVIugE51J0GqZiD4g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c34a7b77-5786-4489-80ff-32dd883c4cca", "record_id": "flaws_cloudtrail:0000016:c34a7b77-5786-4489-80ff-32dd883c4cca", "row_index": 16, "timestamp": "2019-08-21T13:33:10Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c34a7b77-5786-4489-80ff-32dd883c4cca", "eventTime": "2019-08-21T13:33:10Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: jmd-EL80bTrYYNjqzFyZpEoIZRcPTK2tY1B_MpFFfa4RJPJ_QcXFjrVeNo8hKLhJdLjuOuHlQ32SfuvMcWhnLLJLftIrIpX0dGsFt1tCEirylspzTXkaDoOE59n4mjKgcIIl3w8IUYGBTg9CJFAzbRI7IHoUmDZVkXeAJTqPfXfFArvmlaouftdtfOPwTJd5bh2t1RVPWXViHegncZpnpwJVfIxHJUMGHUgiMyge3WSoa2BInXBSrweWCyVKCOLsPEX9WoQ_fBTFKh3iP1SbxRLV8FMOd0jOPVLywor9vTogOnKnXNycen9bbSRgGEVyOgr7bJ6M4sK4ovmgotZEfvZHQt4u1nQpWIMDv-ZuLHQ_YK-xXhD8Jm8-gHKOUng4cs_b8trOA1DMOaerCmceUbuR7yA5LIp8wmryu0PrVywBPBaD6iAdFmFLoVMzNOYY9FZdwaXBycfU6NBkmsO7Ppi9HEpsC615BM2osDI2ULqfBF7VhUb82vHItD708PjhIlhaxq4wtttSXuuYhO-b7-rdxpK85aog2y0pce8-oIc4NM4uey7MGhuUmkL82usWB6Y5NHiKTa-_48LNs6B425h_zJ9XlJ2Ps0s_h0B1xkoTobxqVMRZeW3M1eBXqaheE5RQ-mDtcQTFebdVIugE51J0GqZiD4g", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28c5e3eb-9104-458d-b66d-f02d3482669b", "record_id": "flaws_cloudtrail:0000017:28c5e3eb-9104-458d-b66d-f02d3482669b", "row_index": 17, "timestamp": "2019-08-21T13:33:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28c5e3eb-9104-458d-b66d-f02d3482669b", "eventTime": "2019-08-21T13:33:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28c5e3eb-9104-458d-b66d-f02d3482669b", "record_id": "flaws_cloudtrail:0000018:28c5e3eb-9104-458d-b66d-f02d3482669b", "row_index": 18, "timestamp": "2019-08-21T13:33:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28c5e3eb-9104-458d-b66d-f02d3482669b", "eventTime": "2019-08-21T13:33:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c1d462a-e1fb-40ee-a78a-071caa9d8e68", "record_id": "flaws_cloudtrail:0000019:8c1d462a-e1fb-40ee-a78a-071caa9d8e68", "row_index": 19, "timestamp": "2019-08-21T13:33:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c1d462a-e1fb-40ee-a78a-071caa9d8e68", "eventTime": "2019-08-21T13:33:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c1d462a-e1fb-40ee-a78a-071caa9d8e68", "record_id": "flaws_cloudtrail:0000020:8c1d462a-e1fb-40ee-a78a-071caa9d8e68", "row_index": 20, "timestamp": "2019-08-21T13:33:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c1d462a-e1fb-40ee-a78a-071caa9d8e68", "eventTime": "2019-08-21T13:33:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16a07cd-d694-49db-9ca6-179bfaf48363", "record_id": "flaws_cloudtrail:0000021:a16a07cd-d694-49db-9ca6-179bfaf48363", "row_index": 21, "timestamp": "2019-08-21T13:33:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16a07cd-d694-49db-9ca6-179bfaf48363", "eventTime": "2019-08-21T13:33:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16a07cd-d694-49db-9ca6-179bfaf48363", "record_id": "flaws_cloudtrail:0000022:a16a07cd-d694-49db-9ca6-179bfaf48363", "row_index": 22, "timestamp": "2019-08-21T13:33:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16a07cd-d694-49db-9ca6-179bfaf48363", "eventTime": "2019-08-21T13:33:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816ea8a7-c920-4e69-8b1f-7f1ff88f9104", "record_id": "flaws_cloudtrail:0000023:816ea8a7-c920-4e69-8b1f-7f1ff88f9104", "row_index": 23, "timestamp": "2019-08-21T13:33:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816ea8a7-c920-4e69-8b1f-7f1ff88f9104", "eventTime": "2019-08-21T13:33:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H9b11XJKKGZTq2WvhvWKKcdAdc6NXnwMYwdffdr1V_gu0lnR8kBa8qezx7PuW9QZG24KOBL4IZep6moY6e4kBLnkA_TRLAXWkdl3pzenQOe_Q2ZwE1s8tm-jMnGPJx63iFXACT3Vpt4HeihhLkf7DraxxOZ6Nbw0gfsDgI5XMeLxb9s4ePh-Ox4vILn6hSNJ7zbmRh55cxaVCBQE6dwP7GckLO4mQb_US0jv0dK6sIx8dCpTI2-6-1BA-BfiCMe64HHA8XKe9YRJ9nSNN5rbVCegcrEBZ3DzfWkf_Ens3pjoyCQTuZduzSB4d7BpkNj3gXrPvnjOBsGIc9MXJ0cNO7R2Z24rQ9P7OCKZfTs0C2EOKA3QDrr7jtUx_0n2TmCPi427tNx61z0FyK6-H1tWueWTDdkK1SJAmuZQSs1ONa12tSfYi0pfilWDCOjc2u1sbZOswJxRtmyzBKEFBxJgyuliXbRxDJ_HGpEUQ1eh9D8xEHqPBzdJh5c8WILJX2w3sitW7maBECmNadb5UBFY82CjNgC51W23rhNmr3dcaNix_FYQ4o3wQ4YL7pbN7oZYVvGmF-QImaGyeD89hkl1Pv-KQ5M0W6VL9PoLuVZyng10ZdJ3w2fH52ECx8apkDyByoiKo1ePOwCjtB2MuSBHZPGA1LRvWg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db643ac5-7b48-416e-9cd9-c878c9e5b8a1", "record_id": "flaws_cloudtrail:0000024:db643ac5-7b48-416e-9cd9-c878c9e5b8a1", "row_index": 24, "timestamp": "2019-08-21T13:33:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db643ac5-7b48-416e-9cd9-c878c9e5b8a1", "eventTime": "2019-08-21T13:33:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tFLUs1fLzcYkDJDyNhkq0caGGwMBQkA0y797kYl8iwM22NRfJ1UhfOJzN1Vg0jOrfJNneRxI5iayuxnj_xXkbwWYYm2K0FEOyRwdVbF4inEzm_MpWmitoOpr7NRCKsbHW7sdzE-73I7EulAbhhhxctqRP1Ahc3nYnK4ZPfCD-YtJUZGyOD0avAcsTgHOSuhbM5iWK96Eg8ixbMp60ycCJ3NRQ0Gsl5KikuzBXGNdyhPsrymxdDjR6G1ZHCJHM_6MBbOr-WQ7eNbppAqAGVxwt5yXO9M0h7cA8FytW-YFvxWqm5tvgM2HaGsZna5fVgcxND_TKdbsqjnsXMaEwZMvCIMLBH52x_w2TcxI2CsNpe8FGang1-YkWjAJf7An7D1zu6c7xuRxlJvWmgCmumZEh9zdBnUgST4onJX3-a_caHJPZlP_8fv1skD-R8jxV8sT6joEx5N-7gOa6cs3fwqhyd2MZz0N0zpSwGoCYN98Iq05UdRuIAg5u1BditVMOzcWbTEv9jcRdrALYf_AUoeOQc8OmWoiFb32Fee1gkxxtqbsW6rXFJQWY55eamqEJMAwjK51GHop35cLDrJfBGvFlTT90f0YiZO27L_ombCdNdIP8MhEHGAp8GsT96XGhzbLvEobrnSeJzaebmObwsFuqJ0uD_SnEm4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "816ea8a7-c920-4e69-8b1f-7f1ff88f9104", "record_id": "flaws_cloudtrail:0000025:816ea8a7-c920-4e69-8b1f-7f1ff88f9104", "row_index": 25, "timestamp": "2019-08-21T13:33:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1836, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "816ea8a7-c920-4e69-8b1f-7f1ff88f9104", "eventTime": "2019-08-21T13:33:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H9b11XJKKGZTq2WvhvWKKcdAdc6NXnwMYwdffdr1V_gu0lnR8kBa8qezx7PuW9QZG24KOBL4IZep6moY6e4kBLnkA_TRLAXWkdl3pzenQOe_Q2ZwE1s8tm-jMnGPJx63iFXACT3Vpt4HeihhLkf7DraxxOZ6Nbw0gfsDgI5XMeLxb9s4ePh-Ox4vILn6hSNJ7zbmRh55cxaVCBQE6dwP7GckLO4mQb_US0jv0dK6sIx8dCpTI2-6-1BA-BfiCMe64HHA8XKe9YRJ9nSNN5rbVCegcrEBZ3DzfWkf_Ens3pjoyCQTuZduzSB4d7BpkNj3gXrPvnjOBsGIc9MXJ0cNO7R2Z24rQ9P7OCKZfTs0C2EOKA3QDrr7jtUx_0n2TmCPi427tNx61z0FyK6-H1tWueWTDdkK1SJAmuZQSs1ONa12tSfYi0pfilWDCOjc2u1sbZOswJxRtmyzBKEFBxJgyuliXbRxDJ_HGpEUQ1eh9D8xEHqPBzdJh5c8WILJX2w3sitW7maBECmNadb5UBFY82CjNgC51W23rhNmr3dcaNix_FYQ4o3wQ4YL7pbN7oZYVvGmF-QImaGyeD89hkl1Pv-KQ5M0W6VL9PoLuVZyng10ZdJ3w2fH52ECx8apkDyByoiKo1ePOwCjtB2MuSBHZPGA1LRvWg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db643ac5-7b48-416e-9cd9-c878c9e5b8a1", "record_id": "flaws_cloudtrail:0000026:db643ac5-7b48-416e-9cd9-c878c9e5b8a1", "row_index": 26, "timestamp": "2019-08-21T13:33:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1838, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db643ac5-7b48-416e-9cd9-c878c9e5b8a1", "eventTime": "2019-08-21T13:33:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: tFLUs1fLzcYkDJDyNhkq0caGGwMBQkA0y797kYl8iwM22NRfJ1UhfOJzN1Vg0jOrfJNneRxI5iayuxnj_xXkbwWYYm2K0FEOyRwdVbF4inEzm_MpWmitoOpr7NRCKsbHW7sdzE-73I7EulAbhhhxctqRP1Ahc3nYnK4ZPfCD-YtJUZGyOD0avAcsTgHOSuhbM5iWK96Eg8ixbMp60ycCJ3NRQ0Gsl5KikuzBXGNdyhPsrymxdDjR6G1ZHCJHM_6MBbOr-WQ7eNbppAqAGVxwt5yXO9M0h7cA8FytW-YFvxWqm5tvgM2HaGsZna5fVgcxND_TKdbsqjnsXMaEwZMvCIMLBH52x_w2TcxI2CsNpe8FGang1-YkWjAJf7An7D1zu6c7xuRxlJvWmgCmumZEh9zdBnUgST4onJX3-a_caHJPZlP_8fv1skD-R8jxV8sT6joEx5N-7gOa6cs3fwqhyd2MZz0N0zpSwGoCYN98Iq05UdRuIAg5u1BditVMOzcWbTEv9jcRdrALYf_AUoeOQc8OmWoiFb32Fee1gkxxtqbsW6rXFJQWY55eamqEJMAwjK51GHop35cLDrJfBGvFlTT90f0YiZO27L_ombCdNdIP8MhEHGAp8GsT96XGhzbLvEobrnSeJzaebmObwsFuqJ0uD_SnEm4", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b950dda-c3db-4ce5-a1a5-65c624f2b66d", "record_id": "flaws_cloudtrail:0000027:6b950dda-c3db-4ce5-a1a5-65c624f2b66d", "row_index": 27, "timestamp": "2019-08-21T13:33:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b950dda-c3db-4ce5-a1a5-65c624f2b66d", "eventTime": "2019-08-21T13:33:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b950dda-c3db-4ce5-a1a5-65c624f2b66d", "record_id": "flaws_cloudtrail:0000028:6b950dda-c3db-4ce5-a1a5-65c624f2b66d", "row_index": 28, "timestamp": "2019-08-21T13:33:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b950dda-c3db-4ce5-a1a5-65c624f2b66d", "eventTime": "2019-08-21T13:33:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f6c3f64-de9f-4244-b559-18009ae62483", "record_id": "flaws_cloudtrail:0000029:6f6c3f64-de9f-4244-b559-18009ae62483", "row_index": 29, "timestamp": "2019-08-21T13:33:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f6c3f64-de9f-4244-b559-18009ae62483", "eventTime": "2019-08-21T13:33:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f6c3f64-de9f-4244-b559-18009ae62483", "record_id": "flaws_cloudtrail:0000030:6f6c3f64-de9f-4244-b559-18009ae62483", "row_index": 30, "timestamp": "2019-08-21T13:33:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f6c3f64-de9f-4244-b559-18009ae62483", "eventTime": "2019-08-21T13:33:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba7d553b-525d-4c1b-8e8a-774712f19262", "record_id": "flaws_cloudtrail:0000031:ba7d553b-525d-4c1b-8e8a-774712f19262", "row_index": 31, "timestamp": "2019-08-21T13:33:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba7d553b-525d-4c1b-8e8a-774712f19262", "eventTime": "2019-08-21T13:33:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba7d553b-525d-4c1b-8e8a-774712f19262", "record_id": "flaws_cloudtrail:0000032:ba7d553b-525d-4c1b-8e8a-774712f19262", "row_index": 32, "timestamp": "2019-08-21T13:33:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba7d553b-525d-4c1b-8e8a-774712f19262", "eventTime": "2019-08-21T13:33:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.3xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad80b77-4fce-4b40-a1cd-6f87872177e8", "record_id": "flaws_cloudtrail:0000033:4ad80b77-4fce-4b40-a1cd-6f87872177e8", "row_index": 33, "timestamp": "2019-08-21T13:33:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad80b77-4fce-4b40-a1cd-6f87872177e8", "eventTime": "2019-08-21T13:33:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "929eecea-65de-40ac-b2b0-a2332c26582d", "record_id": "flaws_cloudtrail:0000034:929eecea-65de-40ac-b2b0-a2332c26582d", "row_index": 34, "timestamp": "2019-08-21T13:33:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "929eecea-65de-40ac-b2b0-a2332c26582d", "eventTime": "2019-08-21T13:33:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad80b77-4fce-4b40-a1cd-6f87872177e8", "record_id": "flaws_cloudtrail:0000035:4ad80b77-4fce-4b40-a1cd-6f87872177e8", "row_index": 35, "timestamp": "2019-08-21T13:33:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad80b77-4fce-4b40-a1cd-6f87872177e8", "eventTime": "2019-08-21T13:33:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "929eecea-65de-40ac-b2b0-a2332c26582d", "record_id": "flaws_cloudtrail:0000036:929eecea-65de-40ac-b2b0-a2332c26582d", "row_index": 36, "timestamp": "2019-08-21T13:33:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "929eecea-65de-40ac-b2b0-a2332c26582d", "eventTime": "2019-08-21T13:33:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5063d1b0-eb2c-4556-b38a-1ec88ffc2302", "record_id": "flaws_cloudtrail:0000037:5063d1b0-eb2c-4556-b38a-1ec88ffc2302", "row_index": 37, "timestamp": "2019-08-21T13:33:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1199, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5063d1b0-eb2c-4556-b38a-1ec88ffc2302", "eventTime": "2019-08-21T13:33:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5063d1b0-eb2c-4556-b38a-1ec88ffc2302", "record_id": "flaws_cloudtrail:0000038:5063d1b0-eb2c-4556-b38a-1ec88ffc2302", "row_index": 38, "timestamp": "2019-08-21T13:33:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1199, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5063d1b0-eb2c-4556-b38a-1ec88ffc2302", "eventTime": "2019-08-21T13:33:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a85b04-8e09-4060-bd54-793672403798", "record_id": "flaws_cloudtrail:0000039:c5a85b04-8e09-4060-bd54-793672403798", "row_index": 39, "timestamp": "2019-08-21T13:33:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a85b04-8e09-4060-bd54-793672403798", "eventTime": "2019-08-21T13:33:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a85b04-8e09-4060-bd54-793672403798", "record_id": "flaws_cloudtrail:0000040:c5a85b04-8e09-4060-bd54-793672403798", "row_index": 40, "timestamp": "2019-08-21T13:33:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a85b04-8e09-4060-bd54-793672403798", "eventTime": "2019-08-21T13:33:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c6aa4ab-62ed-4ef8-848b-15a9b7b64430", "record_id": "flaws_cloudtrail:0000041:2c6aa4ab-62ed-4ef8-848b-15a9b7b64430", "row_index": 41, "timestamp": "2019-08-21T13:33:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1939, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c6aa4ab-62ed-4ef8-848b-15a9b7b64430", "eventTime": "2019-08-21T13:33:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dZXC8IhuqhlCfcIH9hKDzWkHVKbG8dKzHn8SYOs051tV_aARTJOAujQ5HufuTg35pzTvZU0u5CmWdW2j-L17IC5L6GDqTOyPZwLdYD76_TZttFKcTSvsUGgBrKC4z-kTZqlbI3aYwyUm9mPbnc0AQMqD7E3RN0DjLtterN19L7zGqD02iQeYN9lirXdMdTaS8byASu801Jf_3kNEo8-SPfgGilrvmAnzXvYXjizkolVQHHRvisOlyIHnqxUlc5poTAOEr8JhFabVgQec0yBUKi5Kp4SleZi4K_-XgJ7I0UE0vWyOyNU4ko5OgdqamnD8Tl0qc-_3tFA7nXXZEE3IWj6c9ThK398VWjFtvHai2FhSjklRSYbMgtMjpvvZ7IVQhzeKGTXW7dLa7VRR-os7CaSd1h2E34mxg0zJfhm5f7ztQksyPKnIiHLaoTjNKJrjVtBPKkJm2Wf5iCYaWoWFLEeX3BCM6l106s5mVO8M53cq3mLOldtS4Xp5ykFKAjjPK1Ee6VTVw_eXgJcF0Tc18fSaOfGcSJ0s2Xf5oqbxwhvjWy6_MLj88HusVGZv8h4lGMCmr2sLN009WGQb_F3_zYhS8q9ffSoAwJcJYoi4DU7m5hV7Y9IEL6Ngk6n8XZ46o8TNgwAylB7k_kO8IY-VWZgD4oEOBx0", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c6aa4ab-62ed-4ef8-848b-15a9b7b64430", "record_id": "flaws_cloudtrail:0000042:2c6aa4ab-62ed-4ef8-848b-15a9b7b64430", "row_index": 42, "timestamp": "2019-08-21T13:33:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1939, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c6aa4ab-62ed-4ef8-848b-15a9b7b64430", "eventTime": "2019-08-21T13:33:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: dZXC8IhuqhlCfcIH9hKDzWkHVKbG8dKzHn8SYOs051tV_aARTJOAujQ5HufuTg35pzTvZU0u5CmWdW2j-L17IC5L6GDqTOyPZwLdYD76_TZttFKcTSvsUGgBrKC4z-kTZqlbI3aYwyUm9mPbnc0AQMqD7E3RN0DjLtterN19L7zGqD02iQeYN9lirXdMdTaS8byASu801Jf_3kNEo8-SPfgGilrvmAnzXvYXjizkolVQHHRvisOlyIHnqxUlc5poTAOEr8JhFabVgQec0yBUKi5Kp4SleZi4K_-XgJ7I0UE0vWyOyNU4ko5OgdqamnD8Tl0qc-_3tFA7nXXZEE3IWj6c9ThK398VWjFtvHai2FhSjklRSYbMgtMjpvvZ7IVQhzeKGTXW7dLa7VRR-os7CaSd1h2E34mxg0zJfhm5f7ztQksyPKnIiHLaoTjNKJrjVtBPKkJm2Wf5iCYaWoWFLEeX3BCM6l106s5mVO8M53cq3mLOldtS4Xp5ykFKAjjPK1Ee6VTVw_eXgJcF0Tc18fSaOfGcSJ0s2Xf5oqbxwhvjWy6_MLj88HusVGZv8h4lGMCmr2sLN009WGQb_F3_zYhS8q9ffSoAwJcJYoi4DU7m5hV7Y9IEL6Ngk6n8XZ46o8TNgwAylB7k_kO8IY-VWZgD4oEOBx0", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83e7e644-852d-45cf-bd06-2c80b07c8df6", "record_id": "flaws_cloudtrail:0000043:83e7e644-852d-45cf-bd06-2c80b07c8df6", "row_index": 43, "timestamp": "2019-08-21T13:33:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83e7e644-852d-45cf-bd06-2c80b07c8df6", "eventTime": "2019-08-21T13:33:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff1abbe-f171-4483-8256-db3f644580", "record_id": "flaws_cloudtrail:0000044:eff1abbe-f171-4483-8256-db3f644580", "row_index": 44, "timestamp": "2019-08-21T13:33:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff1abbe-f171-4483-8256-db3f644580", "eventTime": "2019-08-21T13:33:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 9DAibJBUbVjSpLiZAjS4_WGvpXHx73oKLDaYwMTYRstCccU5I8PMi1NrXm_7gtRLG7eFK8JNZVwXiUfNLb3d3RqgN6-XL5nfhevWEozkMUqLJHbFbV_WLlwBtsUhLMU1ttV1Lv9KCu4LrQDVSTBY75hWqnMuJj-9MndyCwQvtUfoI59QTlcYtkTwM2peo9jYqkLT9fQ133SQgt7AJxj_XW9ghXjD0oQtn_rj6JECm-pZI1PJkujLG_ZlmlE7S89RUwBtLFc4i4wa0lxxHNTKy3qOYVvVrHT9XY2iEq8u6UHGD9fgGDhf1cfFihzb9v_wp7MDo3wkhFblSgjvpgasM0N_tg8w1oJ70ACr92Mt7w-2QQN91ZwmLEWw_WUlL613cMH1AOM6rlYFTOunS4QH5qEMTggWnSPHnSx68Y36tT3MOz3UWDpG50ulqyZWsXoBix1D0BauXUJYiNqqHluNyQl0A9BqgY42_LABFPTcKrAcpvVDR647uTItjS-T_ERuvcy2vVda8pz_eFowaIkPZ-M3d5F62L_shUD3wwQzADENp51fstzVhHi0TOyUBUlMK628bpGoB4XwMtcrXnG_4eItivw6urVtlb-Uj8zyQDyAXImgK5DC2LqGCuABoKepgnIsHcCURSgToPGCaTmQrivlYbI5PjyO", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83e7e644-852d-45cf-bd06-2c80b07c8df6", "record_id": "flaws_cloudtrail:0000045:83e7e644-852d-45cf-bd06-2c80b07c8df6", "row_index": 45, "timestamp": "2019-08-21T13:33:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83e7e644-852d-45cf-bd06-2c80b07c8df6", "eventTime": "2019-08-21T13:33:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff1abbe-f171-4483-8256-db3f644580", "record_id": "flaws_cloudtrail:0000046:eff1abbe-f171-4483-8256-db3f644580", "row_index": 46, "timestamp": "2019-08-21T13:33:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff1abbe-f171-4483-8256-db3f644580", "eventTime": "2019-08-21T13:33:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 9DAibJBUbVjSpLiZAjS4_WGvpXHx73oKLDaYwMTYRstCccU5I8PMi1NrXm_7gtRLG7eFK8JNZVwXiUfNLb3d3RqgN6-XL5nfhevWEozkMUqLJHbFbV_WLlwBtsUhLMU1ttV1Lv9KCu4LrQDVSTBY75hWqnMuJj-9MndyCwQvtUfoI59QTlcYtkTwM2peo9jYqkLT9fQ133SQgt7AJxj_XW9ghXjD0oQtn_rj6JECm-pZI1PJkujLG_ZlmlE7S89RUwBtLFc4i4wa0lxxHNTKy3qOYVvVrHT9XY2iEq8u6UHGD9fgGDhf1cfFihzb9v_wp7MDo3wkhFblSgjvpgasM0N_tg8w1oJ70ACr92Mt7w-2QQN91ZwmLEWw_WUlL613cMH1AOM6rlYFTOunS4QH5qEMTggWnSPHnSx68Y36tT3MOz3UWDpG50ulqyZWsXoBix1D0BauXUJYiNqqHluNyQl0A9BqgY42_LABFPTcKrAcpvVDR647uTItjS-T_ERuvcy2vVda8pz_eFowaIkPZ-M3d5F62L_shUD3wwQzADENp51fstzVhHi0TOyUBUlMK628bpGoB4XwMtcrXnG_4eItivw6urVtlb-Uj8zyQDyAXImgK5DC2LqGCuABoKepgnIsHcCURSgToPGCaTmQrivlYbI5PjyO", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d317cf01-121c-4d3b-b2d9-81359d818db2", "record_id": "flaws_cloudtrail:0000047:d317cf01-121c-4d3b-b2d9-81359d818db2", "row_index": 47, "timestamp": "2019-08-21T13:33:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d317cf01-121c-4d3b-b2d9-81359d818db2", "eventTime": "2019-08-21T13:33:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d317cf01-121c-4d3b-b2d9-81359d818db2", "record_id": "flaws_cloudtrail:0000048:d317cf01-121c-4d3b-b2d9-81359d818db2", "row_index": 48, "timestamp": "2019-08-21T13:33:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d317cf01-121c-4d3b-b2d9-81359d818db2", "eventTime": "2019-08-21T13:33:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc17616-da7d-440c-8494-b6743acb6df9", "record_id": "flaws_cloudtrail:0000049:bc17616-da7d-440c-8494-b6743acb6df9", "row_index": 49, "timestamp": "2019-08-21T13:33:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc17616-da7d-440c-8494-b6743acb6df9", "eventTime": "2019-08-21T13:33:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc17616-da7d-440c-8494-b6743acb6df9", "record_id": "flaws_cloudtrail:0000050:bc17616-da7d-440c-8494-b6743acb6df9", "row_index": 50, "timestamp": "2019-08-21T13:33:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc17616-da7d-440c-8494-b6743acb6df9", "eventTime": "2019-08-21T13:33:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87884-fed9-42e9-ae59-6a7a6434bfe8", "record_id": "flaws_cloudtrail:0000051:87884-fed9-42e9-ae59-6a7a6434bfe8", "row_index": 51, "timestamp": "2019-08-21T13:33:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87884-fed9-42e9-ae59-6a7a6434bfe8", "eventTime": "2019-08-21T13:33:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87884-fed9-42e9-ae59-6a7a6434bfe8", "record_id": "flaws_cloudtrail:0000052:87884-fed9-42e9-ae59-6a7a6434bfe8", "row_index": 52, "timestamp": "2019-08-21T13:33:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1096, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87884-fed9-42e9-ae59-6a7a6434bfe8", "eventTime": "2019-08-21T13:33:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48930fe-08d8-4cb8-8a3b-25d802649a2c", "record_id": "flaws_cloudtrail:0000053:48930fe-08d8-4cb8-8a3b-25d802649a2c", "row_index": 53, "timestamp": "2019-08-21T13:33:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1199, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48930fe-08d8-4cb8-8a3b-25d802649a2c", "eventTime": "2019-08-21T13:33:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48930fe-08d8-4cb8-8a3b-25d802649a2c", "record_id": "flaws_cloudtrail:0000054:48930fe-08d8-4cb8-8a3b-25d802649a2c", "row_index": 54, "timestamp": "2019-08-21T13:33:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1199, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48930fe-08d8-4cb8-8a3b-25d802649a2c", "eventTime": "2019-08-21T13:33:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "038d2aa2-829a-4474-a5da-8f7902185b6e", "record_id": "flaws_cloudtrail:0000055:038d2aa2-829a-4474-a5da-8f7902185b6e", "row_index": 55, "timestamp": "2019-08-21T13:33:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "038d2aa2-829a-4474-a5da-8f7902185b6e", "eventTime": "2019-08-21T13:33:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "038d2aa2-829a-4474-a5da-8f7902185b6e", "record_id": "flaws_cloudtrail:0000056:038d2aa2-829a-4474-a5da-8f7902185b6e", "row_index": 56, "timestamp": "2019-08-21T13:33:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "038d2aa2-829a-4474-a5da-8f7902185b6e", "eventTime": "2019-08-21T13:33:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f61c7d6-784e-4b10-89bb-cccc6b04adb6", "record_id": "flaws_cloudtrail:0000057:6f61c7d6-784e-4b10-89bb-cccc6b04adb6", "row_index": 57, "timestamp": "2019-08-21T13:33:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f61c7d6-784e-4b10-89bb-cccc6b04adb6", "eventTime": "2019-08-21T13:33:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: j4_3_mRrTY6nLJW6wcPVKOemHnEb2G1sbPD8FjWE448zlibUJdJnafCvWmiiJC6c2FnnJPMkHR5YbBHJ33kT-md7n8dMaAHX2IrllDx9EhUpVoRPEFQE4ou1uR7guklAF5I1VTugqZNkJUV1s8R19DTJL2CdVpfhUDQQ5xHe-raYODVzTX4KN9BRtcc-pSRMTTsIJ9zh58BtXrm_QVBPtevtTQwv9Jr1ZSvZXnAKCTyxj-jXSVdXNCyISozFrid48hf-ATGRKR1IYvzGe0feGD3PrHeFHlLKiwyzdRF890KwJgCyoO6hb7fTF4yxkvi6zo0KGbS86ol5TFE3GO-Sfzkn2KFZ5MePS_PRsFsSfdKWMcZIQ90TE2u-DH_ItZUso9tTQT-bJzjWdLhdb0Kijar6zNViL2twBxRFTxitQ7dCiBsI4C04ohaxWLegBs9fBUBE95WiTTXuMUCB_jTMmOf5xrXj5tVxkkb1zr6PefWuamUV17jtm18fd5XorHX604FWnHyhc2Blw4rMxYetb06PJoLpSkVNHwzt9mYx5WZBp5oLx0Btgxqp2yypwuzVwQyn83N1aoPeiUAMhNP3m8sm7qA3vgMGQ2Ct_VSmeMqBm_KrJv_oH28d2yTZLyDkVzOwsLaECah0N6pbKQVb_0HdmaTP", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f61c7d6-784e-4b10-89bb-cccc6b04adb6", "record_id": "flaws_cloudtrail:0000058:6f61c7d6-784e-4b10-89bb-cccc6b04adb6", "row_index": 58, "timestamp": "2019-08-21T13:33:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1834, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f61c7d6-784e-4b10-89bb-cccc6b04adb6", "eventTime": "2019-08-21T13:33:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: j4_3_mRrTY6nLJW6wcPVKOemHnEb2G1sbPD8FjWE448zlibUJdJnafCvWmiiJC6c2FnnJPMkHR5YbBHJ33kT-md7n8dMaAHX2IrllDx9EhUpVoRPEFQE4ou1uR7guklAF5I1VTugqZNkJUV1s8R19DTJL2CdVpfhUDQQ5xHe-raYODVzTX4KN9BRtcc-pSRMTTsIJ9zh58BtXrm_QVBPtevtTQwv9Jr1ZSvZXnAKCTyxj-jXSVdXNCyISozFrid48hf-ATGRKR1IYvzGe0feGD3PrHeFHlLKiwyzdRF890KwJgCyoO6hb7fTF4yxkvi6zo0KGbS86ol5TFE3GO-Sfzkn2KFZ5MePS_PRsFsSfdKWMcZIQ90TE2u-DH_ItZUso9tTQT-bJzjWdLhdb0Kijar6zNViL2twBxRFTxitQ7dCiBsI4C04ohaxWLegBs9fBUBE95WiTTXuMUCB_jTMmOf5xrXj5tVxkkb1zr6PefWuamUV17jtm18fd5XorHX604FWnHyhc2Blw4rMxYetb06PJoLpSkVNHwzt9mYx5WZBp5oLx0Btgxqp2yypwuzVwQyn83N1aoPeiUAMhNP3m8sm7qA3vgMGQ2Ct_VSmeMqBm_KrJv_oH28d2yTZLyDkVzOwsLaECah0N6pbKQVb_0HdmaTP", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b727345-a006-41a3-b0a4-688a1d89cf9d", "record_id": "flaws_cloudtrail:0000059:1b727345-a006-41a3-b0a4-688a1d89cf9d", "row_index": 59, "timestamp": "2019-08-21T13:33:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1199, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b727345-a006-41a3-b0a4-688a1d89cf9d", "eventTime": "2019-08-21T13:33:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e84a3a7-dea4-4dfa-a13e-f32228c4ed2a", "record_id": "flaws_cloudtrail:0000060:1e84a3a7-dea4-4dfa-a13e-f32228c4ed2a", "row_index": 60, "timestamp": "2019-08-21T13:33:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e84a3a7-dea4-4dfa-a13e-f32228c4ed2a", "eventTime": "2019-08-21T13:33:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "338b9a25-f39a-40e5-adcd-7823ff8f8464", "record_id": "flaws_cloudtrail:0000061:338b9a25-f39a-40e5-adcd-7823ff8f8464", "row_index": 61, "timestamp": "2019-08-21T13:33:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "338b9a25-f39a-40e5-adcd-7823ff8f8464", "eventTime": "2019-08-21T13:33:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: XNkSioaa4lzNg7mSjJQ79vZn_OL5PY6TY6RSlutYwOI6vDBEokB11vHGiepx5YCId9FxIILcda4gG8zGO7f2xvs4q7XpWONDd6Wh46UpuDaDJMr_SXKOnx1ueRJtPtNOuJpKOnCeFfnH5-_UNsdbzLnorEoC6cUHFNdCt0GAg7tON2xq9zPuxX1SiBQ1dZqB919qB56H7ohb99Xvrnf35zgWvAuZ1RRdOs29fzC3V3utp7SJdYnt0mXBZlF6v-fwgswL_R7Wctk_rQiHMxEYvv-F4vlixKWtXvuibok_zGmy1cqM8OcKG2byGOJgk4Tm-U92G8-kMFjqv0geis80jIE5TDrsBUo5bMqPmNQcr_kiEclosAckUo2BgoeN0dPWhC7KiZ2p5A7tt7FPgFZSPbaaL4GpUZh14GYX0axpmhMNYuv2Qf6_IY1ZrtGB3U-wwKkwS86eJx_UPODAhWsDr7bTKL8kjeaMwZMzCZ5t7rbY4oveGOFYYGqJhUncMk7IspqS_iqzCQv9oV7XISRnU3RiHb3Hg553ymPrODqYay0UasDmmNp1wEl4vVT_JAt9GqTKaM-jHurBO7DEb_Yg71_LB-OC9oRKbKzkFR1T9kvgIEVq19imeTk2t0xolDqAmgZ1YKQbvVUmIsk5NIjBQFkNKfBc2mk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b727345-a006-41a3-b0a4-688a1d89cf9d", "record_id": "flaws_cloudtrail:0000062:1b727345-a006-41a3-b0a4-688a1d89cf9d", "row_index": 62, "timestamp": "2019-08-21T13:33:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1199, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b727345-a006-41a3-b0a4-688a1d89cf9d", "eventTime": "2019-08-21T13:33:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e84a3a7-dea4-4dfa-a13e-f32228c4ed2a", "record_id": "flaws_cloudtrail:0000063:1e84a3a7-dea4-4dfa-a13e-f32228c4ed2a", "row_index": 63, "timestamp": "2019-08-21T13:33:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e84a3a7-dea4-4dfa-a13e-f32228c4ed2a", "eventTime": "2019-08-21T13:33:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "338b9a25-f39a-40e5-adcd-7823ff8f8464", "record_id": "flaws_cloudtrail:0000064:338b9a25-f39a-40e5-adcd-7823ff8f8464", "row_index": 64, "timestamp": "2019-08-21T13:33:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1837, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "338b9a25-f39a-40e5-adcd-7823ff8f8464", "eventTime": "2019-08-21T13:33:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: XNkSioaa4lzNg7mSjJQ79vZn_OL5PY6TY6RSlutYwOI6vDBEokB11vHGiepx5YCId9FxIILcda4gG8zGO7f2xvs4q7XpWONDd6Wh46UpuDaDJMr_SXKOnx1ueRJtPtNOuJpKOnCeFfnH5-_UNsdbzLnorEoC6cUHFNdCt0GAg7tON2xq9zPuxX1SiBQ1dZqB919qB56H7ohb99Xvrnf35zgWvAuZ1RRdOs29fzC3V3utp7SJdYnt0mXBZlF6v-fwgswL_R7Wctk_rQiHMxEYvv-F4vlixKWtXvuibok_zGmy1cqM8OcKG2byGOJgk4Tm-U92G8-kMFjqv0geis80jIE5TDrsBUo5bMqPmNQcr_kiEclosAckUo2BgoeN0dPWhC7KiZ2p5A7tt7FPgFZSPbaaL4GpUZh14GYX0axpmhMNYuv2Qf6_IY1ZrtGB3U-wwKkwS86eJx_UPODAhWsDr7bTKL8kjeaMwZMzCZ5t7rbY4oveGOFYYGqJhUncMk7IspqS_iqzCQv9oV7XISRnU3RiHb3Hg553ymPrODqYay0UasDmmNp1wEl4vVT_JAt9GqTKaM-jHurBO7DEb_Yg71_LB-OC9oRKbKzkFR1T9kvgIEVq19imeTk2t0xolDqAmgZ1YKQbvVUmIsk5NIjBQFkNKfBc2mk", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e7a4906-58f8-4c50-8496-a51e6c509fbd", "record_id": "flaws_cloudtrail:0000065:3e7a4906-58f8-4c50-8496-a51e6c509fbd", "row_index": 65, "timestamp": "2019-08-21T13:33:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e7a4906-58f8-4c50-8496-a51e6c509fbd", "eventTime": "2019-08-21T13:33:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e7a4906-58f8-4c50-8496-a51e6c509fbd", "record_id": "flaws_cloudtrail:0000066:3e7a4906-58f8-4c50-8496-a51e6c509fbd", "row_index": 66, "timestamp": "2019-08-21T13:33:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e7a4906-58f8-4c50-8496-a51e6c509fbd", "eventTime": "2019-08-21T13:33:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67a9fc14-c4d8-45a0-8576-daadf57c899e", "record_id": "flaws_cloudtrail:0000067:67a9fc14-c4d8-45a0-8576-daadf57c899e", "row_index": 67, "timestamp": "2019-08-21T13:33:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67a9fc14-c4d8-45a0-8576-daadf57c899e", "eventTime": "2019-08-21T13:33:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67a9fc14-c4d8-45a0-8576-daadf57c899e", "record_id": "flaws_cloudtrail:0000068:67a9fc14-c4d8-45a0-8576-daadf57c899e", "row_index": 68, "timestamp": "2019-08-21T13:33:39Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67a9fc14-c4d8-45a0-8576-daadf57c899e", "eventTime": "2019-08-21T13:33:39Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45b7615e-bd9b-4fbb-b694-f6f128ee42eb", "record_id": "flaws_cloudtrail:0000069:45b7615e-bd9b-4fbb-b694-f6f128ee42eb", "row_index": 69, "timestamp": "2019-08-21T13:33:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45b7615e-bd9b-4fbb-b694-f6f128ee42eb", "eventTime": "2019-08-21T13:33:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e52b552-7860-4942-bf44-20e069d4d5e4", "record_id": "flaws_cloudtrail:0000070:6e52b552-7860-4942-bf44-20e069d4d5e4", "row_index": 70, "timestamp": "2019-08-21T13:33:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e52b552-7860-4942-bf44-20e069d4d5e4", "eventTime": "2019-08-21T13:33:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45b7615e-bd9b-4fbb-b694-f6f128ee42eb", "record_id": "flaws_cloudtrail:0000071:45b7615e-bd9b-4fbb-b694-f6f128ee42eb", "row_index": 71, "timestamp": "2019-08-21T13:33:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45b7615e-bd9b-4fbb-b694-f6f128ee42eb", "eventTime": "2019-08-21T13:33:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e52b552-7860-4942-bf44-20e069d4d5e4", "record_id": "flaws_cloudtrail:0000072:6e52b552-7860-4942-bf44-20e069d4d5e4", "row_index": 72, "timestamp": "2019-08-21T13:33:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e52b552-7860-4942-bf44-20e069d4d5e4", "eventTime": "2019-08-21T13:33:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f638c8e3-43bd-4999-b72e-d2d122a7658a", "record_id": "flaws_cloudtrail:0000073:f638c8e3-43bd-4999-b72e-d2d122a7658a", "row_index": 73, "timestamp": "2019-08-21T13:33:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f638c8e3-43bd-4999-b72e-d2d122a7658a", "eventTime": "2019-08-21T13:33:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: jR5WlK8ZzVbRLNuWihCi40HZhENcgoOazu_g_vVFqEG3uN8uzJOzbAW6AqLlHzWvaHDMX9JyWYJvs-TEkkwDvPtW4beKIbC-owvq_xOuIdaUzVSBX7lyQEVUcbf6aS3HBRdktGd6l6X6zOEOY8Z1KNN-hZOj2fQeSQ8_wXTByKOZJOt4b4KgnCGWuNqW69YpT7HMIxl6Ngrwmp6ruGv-rzGuEZEH-YHrXDFCQqKb3YPx1SyPBHHLBjLsjzAfr7yDOWi1Fo8OCjy0sC4N4iVu1NWt2EA9aX58xq0UyC_qKZfdxNsoO9I4WqYKEimZbGPdjjTsuVRTCQ-slF1vID5lK7IWBhHhf0zp8aphW9gFZ8mHRXpAt8mMWZfceWGxRF5kWTy6FFZXIjIXFPl5cEGvaFXjPMLvxaydnVOPm50R5o0mOoOQXgdUjc_Jm2TZZdolnoyMWZyxiN3O-Wb-k8H8RoPOxcUZIT_C4fGT65ELYphOxG-9L-VgDHpJv0_hx88w28uRRl_9l2RX95ium-64XOZFJ3PPyXwC8Xl7IJBR3anQ9K34fteDwgG4etSpf0JzJbbsZV8rB-wDOhKA-_vr1T4-U5oAyDQVLcNcLgY2AzICfueLYTrFB78OMP5hcTzE2cBzZxrF-Xe4j6NHirNVYqugLydxug", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ce303a2-fdf9-400f-bf46-e065c9e7ef83", "record_id": "flaws_cloudtrail:0000074:1ce303a2-fdf9-400f-bf46-e065c9e7ef83", "row_index": 74, "timestamp": "2019-08-21T13:33:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ce303a2-fdf9-400f-bf46-e065c9e7ef83", "eventTime": "2019-08-21T13:33:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: kSjgYtQxKazrRuoaY7UR54k8h50c8oQ9uam_DsYI-8Bqb7xGVZdKJvn9QsybEMcpTPfhf_tmNSe00oUUsoRsPF7teRvjTwOu3y5Twp9HnKaFt6IDnuINVQ_zjIwj16Bhn-i38hycYj9GDrq9FRqqhqszlrdIYGks53D_xmlwrQZLXxeK7hsFB4zRbgJnWFK77_-zl_egYCS2PIzxxV05-iJoBhYcRZXSPn4DGdYVQ6MZ77CnOcZngvuc0qEEn8Xa8OzhDA4_xZ8U418kM_IO4Axn8ATS-So_FvIAICIfSPeedgmTxC_B74kq7Nl1DRGb9UAOdmWUn8z19CTSOoDCp9htIUOiZY6HIdE-oXh3Za2twR2o1Hro7IW3YWQYRBfcTe0-uaFS7PNRezwEqaUpvEbWWrn6gYpukYBn9FI-lJUKxSLEbCiggW_qTL_Eot3tmZVMVg8J3wNax90ta8PLv7z81g35hNPX9AYEzyYNWFVgF4LpX511aGeKdHC5rjZXH0p-vVGgCil2ZEymXKB77ZGD7ROEujasG_DHwu3_8m9F2_83TDhKEcYFFsIdCcFduP9eQSPYGe1oC0i6h_6HPCh4dawAmNZazjMik-TQ8siG6fsLcVCuGkr8wMoEuNza7J-zYgLpGyNbfnvU_VJxiZf7KVEigw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afaa8330-0f48-4040-a1d9-512e0d77ef03", "record_id": "flaws_cloudtrail:0000075:afaa8330-0f48-4040-a1d9-512e0d77ef03", "row_index": 75, "timestamp": "2019-08-21T13:33:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afaa8330-0f48-4040-a1d9-512e0d77ef03", "eventTime": "2019-08-21T13:33:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f638c8e3-43bd-4999-b72e-d2d122a7658a", "record_id": "flaws_cloudtrail:0000076:f638c8e3-43bd-4999-b72e-d2d122a7658a", "row_index": 76, "timestamp": "2019-08-21T13:33:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f638c8e3-43bd-4999-b72e-d2d122a7658a", "eventTime": "2019-08-21T13:33:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: jR5WlK8ZzVbRLNuWihCi40HZhENcgoOazu_g_vVFqEG3uN8uzJOzbAW6AqLlHzWvaHDMX9JyWYJvs-TEkkwDvPtW4beKIbC-owvq_xOuIdaUzVSBX7lyQEVUcbf6aS3HBRdktGd6l6X6zOEOY8Z1KNN-hZOj2fQeSQ8_wXTByKOZJOt4b4KgnCGWuNqW69YpT7HMIxl6Ngrwmp6ruGv-rzGuEZEH-YHrXDFCQqKb3YPx1SyPBHHLBjLsjzAfr7yDOWi1Fo8OCjy0sC4N4iVu1NWt2EA9aX58xq0UyC_qKZfdxNsoO9I4WqYKEimZbGPdjjTsuVRTCQ-slF1vID5lK7IWBhHhf0zp8aphW9gFZ8mHRXpAt8mMWZfceWGxRF5kWTy6FFZXIjIXFPl5cEGvaFXjPMLvxaydnVOPm50R5o0mOoOQXgdUjc_Jm2TZZdolnoyMWZyxiN3O-Wb-k8H8RoPOxcUZIT_C4fGT65ELYphOxG-9L-VgDHpJv0_hx88w28uRRl_9l2RX95ium-64XOZFJ3PPyXwC8Xl7IJBR3anQ9K34fteDwgG4etSpf0JzJbbsZV8rB-wDOhKA-_vr1T4-U5oAyDQVLcNcLgY2AzICfueLYTrFB78OMP5hcTzE2cBzZxrF-Xe4j6NHirNVYqugLydxug", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ce303a2-fdf9-400f-bf46-e065c9e7ef83", "record_id": "flaws_cloudtrail:0000077:1ce303a2-fdf9-400f-bf46-e065c9e7ef83", "row_index": 77, "timestamp": "2019-08-21T13:33:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ce303a2-fdf9-400f-bf46-e065c9e7ef83", "eventTime": "2019-08-21T13:33:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: kSjgYtQxKazrRuoaY7UR54k8h50c8oQ9uam_DsYI-8Bqb7xGVZdKJvn9QsybEMcpTPfhf_tmNSe00oUUsoRsPF7teRvjTwOu3y5Twp9HnKaFt6IDnuINVQ_zjIwj16Bhn-i38hycYj9GDrq9FRqqhqszlrdIYGks53D_xmlwrQZLXxeK7hsFB4zRbgJnWFK77_-zl_egYCS2PIzxxV05-iJoBhYcRZXSPn4DGdYVQ6MZ77CnOcZngvuc0qEEn8Xa8OzhDA4_xZ8U418kM_IO4Axn8ATS-So_FvIAICIfSPeedgmTxC_B74kq7Nl1DRGb9UAOdmWUn8z19CTSOoDCp9htIUOiZY6HIdE-oXh3Za2twR2o1Hro7IW3YWQYRBfcTe0-uaFS7PNRezwEqaUpvEbWWrn6gYpukYBn9FI-lJUKxSLEbCiggW_qTL_Eot3tmZVMVg8J3wNax90ta8PLv7z81g35hNPX9AYEzyYNWFVgF4LpX511aGeKdHC5rjZXH0p-vVGgCil2ZEymXKB77ZGD7ROEujasG_DHwu3_8m9F2_83TDhKEcYFFsIdCcFduP9eQSPYGe1oC0i6h_6HPCh4dawAmNZazjMik-TQ8siG6fsLcVCuGkr8wMoEuNza7J-zYgLpGyNbfnvU_VJxiZf7KVEigw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afaa8330-0f48-4040-a1d9-512e0d77ef03", "record_id": "flaws_cloudtrail:0000078:afaa8330-0f48-4040-a1d9-512e0d77ef03", "row_index": 78, "timestamp": "2019-08-21T13:33:45Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afaa8330-0f48-4040-a1d9-512e0d77ef03", "eventTime": "2019-08-21T13:33:45Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83884-429d-474f-942a-b80a6ed8a3fd", "record_id": "flaws_cloudtrail:0000079:83884-429d-474f-942a-b80a6ed8a3fd", "row_index": 79, "timestamp": "2019-08-21T13:33:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1198, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83884-429d-474f-942a-b80a6ed8a3fd", "eventTime": "2019-08-21T13:33:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feb3c94b-4429-40d6-8cf7-f5eae36547e1", "record_id": "flaws_cloudtrail:0000080:feb3c94b-4429-40d6-8cf7-f5eae36547e1", "row_index": 80, "timestamp": "2019-08-21T13:33:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feb3c94b-4429-40d6-8cf7-f5eae36547e1", "eventTime": "2019-08-21T13:33:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83884-429d-474f-942a-b80a6ed8a3fd", "record_id": "flaws_cloudtrail:0000081:83884-429d-474f-942a-b80a6ed8a3fd", "row_index": 81, "timestamp": "2019-08-21T13:33:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1198, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83884-429d-474f-942a-b80a6ed8a3fd", "eventTime": "2019-08-21T13:33:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "feb3c94b-4429-40d6-8cf7-f5eae36547e1", "record_id": "flaws_cloudtrail:0000082:feb3c94b-4429-40d6-8cf7-f5eae36547e1", "row_index": 82, "timestamp": "2019-08-21T13:33:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "feb3c94b-4429-40d6-8cf7-f5eae36547e1", "eventTime": "2019-08-21T13:33:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e61d459-cccd-4567-ada1-637fde16668e", "record_id": "flaws_cloudtrail:0000083:5e61d459-cccd-4567-ada1-637fde16668e", "row_index": 83, "timestamp": "2019-08-21T13:33:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e61d459-cccd-4567-ada1-637fde16668e", "eventTime": "2019-08-21T13:33:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "147182a27-5912-436d-b985-59b86d13e429", "record_id": "flaws_cloudtrail:0000084:147182a27-5912-436d-b985-59b86d13e429", "row_index": 84, "timestamp": "2019-08-21T13:33:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "147182a27-5912-436d-b985-59b86d13e429", "eventTime": "2019-08-21T13:33:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e61d459-cccd-4567-ada1-637fde16668e", "record_id": "flaws_cloudtrail:0000085:5e61d459-cccd-4567-ada1-637fde16668e", "row_index": 85, "timestamp": "2019-08-21T13:33:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e61d459-cccd-4567-ada1-637fde16668e", "eventTime": "2019-08-21T13:33:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "147182a27-5912-436d-b985-59b86d13e429", "record_id": "flaws_cloudtrail:0000086:147182a27-5912-436d-b985-59b86d13e429", "row_index": 86, "timestamp": "2019-08-21T13:33:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "147182a27-5912-436d-b985-59b86d13e429", "eventTime": "2019-08-21T13:33:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c70aa90d-0e07-4972-8f05-5865d5afbbfd", "record_id": "flaws_cloudtrail:0000087:c70aa90d-0e07-4972-8f05-5865d5afbbfd", "row_index": 87, "timestamp": "2019-08-21T13:33:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c70aa90d-0e07-4972-8f05-5865d5afbbfd", "eventTime": "2019-08-21T13:33:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c70aa90d-0e07-4972-8f05-5865d5afbbfd", "record_id": "flaws_cloudtrail:0000088:c70aa90d-0e07-4972-8f05-5865d5afbbfd", "row_index": 88, "timestamp": "2019-08-21T13:33:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c70aa90d-0e07-4972-8f05-5865d5afbbfd", "eventTime": "2019-08-21T13:33:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab16437a-908d-4b41-ad1c-d18ab2b3c109", "record_id": "flaws_cloudtrail:0000089:ab16437a-908d-4b41-ad1c-d18ab2b3c109", "row_index": 89, "timestamp": "2019-08-21T13:33:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab16437a-908d-4b41-ad1c-d18ab2b3c109", "eventTime": "2019-08-21T13:33:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab16437a-908d-4b41-ad1c-d18ab2b3c109", "record_id": "flaws_cloudtrail:0000090:ab16437a-908d-4b41-ad1c-d18ab2b3c109", "row_index": 90, "timestamp": "2019-08-21T13:33:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab16437a-908d-4b41-ad1c-d18ab2b3c109", "eventTime": "2019-08-21T13:33:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9abaaa-08c8-47fa-8d92-100988d081c3a", "record_id": "flaws_cloudtrail:0000091:9d9abaaa-08c8-47fa-8d92-100988d081c3a", "row_index": 91, "timestamp": "2019-08-21T13:33:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9abaaa-08c8-47fa-8d92-100988d081c3a", "eventTime": "2019-08-21T13:33:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d9abaaa-08c8-47fa-8d92-100988d081c3a", "record_id": "flaws_cloudtrail:0000092:9d9abaaa-08c8-47fa-8d92-100988d081c3a", "row_index": 92, "timestamp": "2019-08-21T13:33:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d9abaaa-08c8-47fa-8d92-100988d081c3a", "eventTime": "2019-08-21T13:33:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1fcb8f8-fad9-4728-839f-f9e5578693c9", "record_id": "flaws_cloudtrail:0000093:a1fcb8f8-fad9-4728-839f-f9e5578693c9", "row_index": 93, "timestamp": "2019-08-21T13:33:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1fcb8f8-fad9-4728-839f-f9e5578693c9", "eventTime": "2019-08-21T13:33:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1fcb8f8-fad9-4728-839f-f9e5578693c9", "record_id": "flaws_cloudtrail:0000094:a1fcb8f8-fad9-4728-839f-f9e5578693c9", "row_index": 94, "timestamp": "2019-08-21T13:33:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1fcb8f8-fad9-4728-839f-f9e5578693c9", "eventTime": "2019-08-21T13:33:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62038b9-0603-4416-92b3-b0c4781b80ca", "record_id": "flaws_cloudtrail:0000095:62038b9-0603-4416-92b3-b0c4781b80ca", "row_index": 95, "timestamp": "2019-08-21T13:34:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62038b9-0603-4416-92b3-b0c4781b80ca", "eventTime": "2019-08-21T13:34:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: iMwJzL_sogjjbW-HkyNL5z0N1ZTnnyik_k2GVnnEN2K2uvjPwX7MmUWtRj_EHCS3ED4_34mBWz8kdKbe3Ei1XJAU32vQ-CkJtV6pepc9_Df3HctEyR9EuTRFWcTr7dLCK3jA_rf1Y7RWSbrazFVA_4ZHvPLedwmR2CK1-YyjfIUu2NjAIOd0_hveJVj0vreiQwiogLUqVHNX9Thbom58WQbY9b1u0tnTuF-DwO0z68jkGvlsIAXFqwa-g8-4u_BBWmFJ3LMmi2jh3mNFeVSqr17U-YNslQ1VxTtIYRn2XSAnbCXtS55pyjVLqTQRR2naw1dnr1ytzroo8-iR9Rqw4Ms3DXpiKQjlmlfgGsz4pqh9h7rA-abs03sg9uss1fNngjOve0EVaAXJMCKui3-yXiJJVj8fjtgaDi-WHkqVCWZCySYyN_UjbpEHXZjH4GXYyWWrcipb7kK6HiK8Ycz0AQByydnOZFlI_lDCLmp0qBY_sD-gaouMSzc6MTeb423qMMbheOv5o-rguyq27ABqKV3zVWWKyorQ3yHfE6UgnLFV19WQ_ezZbAerwb2-Wut6akJBKAMqSdZCg3fAV-0cXm2agNHb1UUeC-vjYofQ-qEQ2ULT8qVCfIDZStP8AcuXJWur_Gfr2dR1BqLC8ldqUukjr_pHz3s", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12b09e64-32ff-4980-9cf8-a2b120971ab5e", "record_id": "flaws_cloudtrail:0000096:12b09e64-32ff-4980-9cf8-a2b120971ab5e", "row_index": 96, "timestamp": "2019-08-21T13:34:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12b09e64-32ff-4980-9cf8-a2b120971ab5e", "eventTime": "2019-08-21T13:34:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zsUjfVB3kNrdpvH2GZnLB5DIA1U-No93fpNdMVGlrLsUzo3dRrya_4l_cGwtGkLDlSclfWDs8uq5lbKo3wzSZz6g3Bvd7cHFINIsht0H9_Svj2OuoOBMwoqBLM-97rE2zFuflDvRJ9KADhG9ndu9QZmxYgQy0niuNuUstiRVVxIWF_tJmlyqJXFITiQmGlsfZ2PsGmIvbO1DLfY_6HjqwJhlx_juabr8lCSekk38gn4yC9C78GwG2OV0I1WnCEjXhX3ZFJsCzev-qvAcHRvj3ET5Id4-e9-W3tgh2osSFTdmm47wWhqO9AT9bJv8I6dftuXkSOqDCN3Rpi5eDmoJsqvvGF18S7G4vsFVQlngbAwuXwNKhhataANwZCE-kOuGqOo5V0An7zpTqykkQ52hZ1Gu3zAxz7Nt92CmRHiuVYlkR2OjvHKzafaxx0ouwQ4B27HsOzbl5X0S6zocrc24ZRq4yBhqM10uFPJvqElVeMFsjovZ2baIvhRt5V_HPFOpmlutt57qbyqzi5SQLUUrIHLnGOtJ1jrPruI0I-j-6X8-xobCILuwys4y2du2YoqDBeAAJ6cbAklrLpwp0DFRVqvFJCfb6mH1Y0Qq6OVBvCWZ748tJ67tN7RblkKUVisYoBRr0EaWyDtCoO11f6FJPuY890ShMjI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62038b9-0603-4416-92b3-b0c4781b80ca", "record_id": "flaws_cloudtrail:0000097:62038b9-0603-4416-92b3-b0c4781b80ca", "row_index": 97, "timestamp": "2019-08-21T13:34:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62038b9-0603-4416-92b3-b0c4781b80ca", "eventTime": "2019-08-21T13:34:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: iMwJzL_sogjjbW-HkyNL5z0N1ZTnnyik_k2GVnnEN2K2uvjPwX7MmUWtRj_EHCS3ED4_34mBWz8kdKbe3Ei1XJAU32vQ-CkJtV6pepc9_Df3HctEyR9EuTRFWcTr7dLCK3jA_rf1Y7RWSbrazFVA_4ZHvPLedwmR2CK1-YyjfIUu2NjAIOd0_hveJVj0vreiQwiogLUqVHNX9Thbom58WQbY9b1u0tnTuF-DwO0z68jkGvlsIAXFqwa-g8-4u_BBWmFJ3LMmi2jh3mNFeVSqr17U-YNslQ1VxTtIYRn2XSAnbCXtS55pyjVLqTQRR2naw1dnr1ytzroo8-iR9Rqw4Ms3DXpiKQjlmlfgGsz4pqh9h7rA-abs03sg9uss1fNngjOve0EVaAXJMCKui3-yXiJJVj8fjtgaDi-WHkqVCWZCySYyN_UjbpEHXZjH4GXYyWWrcipb7kK6HiK8Ycz0AQByydnOZFlI_lDCLmp0qBY_sD-gaouMSzc6MTeb423qMMbheOv5o-rguyq27ABqKV3zVWWKyorQ3yHfE6UgnLFV19WQ_ezZbAerwb2-Wut6akJBKAMqSdZCg3fAV-0cXm2agNHb1UUeC-vjYofQ-qEQ2ULT8qVCfIDZStP8AcuXJWur_Gfr2dR1BqLC8ldqUukjr_pHz3s", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12b09e64-32ff-4980-9cf8-a2b120971ab5e", "record_id": "flaws_cloudtrail:0000098:12b09e64-32ff-4980-9cf8-a2b120971ab5e", "row_index": 98, "timestamp": "2019-08-21T13:34:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12b09e64-32ff-4980-9cf8-a2b120971ab5e", "eventTime": "2019-08-21T13:34:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zsUjfVB3kNrdpvH2GZnLB5DIA1U-No93fpNdMVGlrLsUzo3dRrya_4l_cGwtGkLDlSclfWDs8uq5lbKo3wzSZz6g3Bvd7cHFINIsht0H9_Svj2OuoOBMwoqBLM-97rE2zFuflDvRJ9KADhG9ndu9QZmxYgQy0niuNuUstiRVVxIWF_tJmlyqJXFITiQmGlsfZ2PsGmIvbO1DLfY_6HjqwJhlx_juabr8lCSekk38gn4yC9C78GwG2OV0I1WnCEjXhX3ZFJsCzev-qvAcHRvj3ET5Id4-e9-W3tgh2osSFTdmm47wWhqO9AT9bJv8I6dftuXkSOqDCN3Rpi5eDmoJsqvvGF18S7G4vsFVQlngbAwuXwNKhhataANwZCE-kOuGqOo5V0An7zpTqykkQ52hZ1Gu3zAxz7Nt92CmRHiuVYlkR2OjvHKzafaxx0ouwQ4B27HsOzbl5X0S6zocrc24ZRq4yBhqM10uFPJvqElVeMFsjovZ2baIvhRt5V_HPFOpmlutt57qbyqzi5SQLUUrIHLnGOtJ1jrPruI0I-j-6X8-xobCILuwys4y2du2YoqDBeAAJ6cbAklrLpwp0DFRVqvFJCfb6mH1Y0Qq6OVBvCWZ748tJ67tN7RblkKUVisYoBRr0EaWyDtCoO11f6FJPuY890ShMjI", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6638c75a-ffd9-4ee1-8ad5-de13a8d15909", "record_id": "flaws_cloudtrail:0000099:6638c75a-ffd9-4ee1-8ad5-de13a8d15909", "row_index": 99, "timestamp": "2019-08-21T13:34:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6638c75a-ffd9-4ee1-8ad5-de13a8d15909", "eventTime": "2019-08-21T13:34:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6638c75a-ffd9-4ee1-8ad5-de13a8d15909", "record_id": "flaws_cloudtrail:0000100:6638c75a-ffd9-4ee1-8ad5-de13a8d15909", "row_index": 100, "timestamp": "2019-08-21T13:34:03Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6638c75a-ffd9-4ee1-8ad5-de13a8d15909", "eventTime": "2019-08-21T13:34:03Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7442631-7f51-462e-bd8c-af2905d9ddca", "record_id": "flaws_cloudtrail:0000101:b7442631-7f51-462e-bd8c-af2905d9ddca", "row_index": 101, "timestamp": "2019-08-21T13:34:03Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/data-reader-58"], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7442631-7f51-462e-bd8c-af2905d9ddca", "eventTime": "2019-08-21T13:34:03Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/data-reader-58", "roleSessionName": "reader-4964"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/data-reader-58"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af6e0dce-8649-4fe8-b787-e1caa05f825e", "record_id": "flaws_cloudtrail:0000102:af6e0dce-8649-4fe8-b787-e1caa05f825e", "row_index": 102, "timestamp": "2019-08-21T13:34:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af6e0dce-8649-4fe8-b787-e1caa05f825e", "eventTime": "2019-08-21T13:34:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af6e0dce-8649-4fe8-b787-e1caa05f825e", "record_id": "flaws_cloudtrail:0000103:af6e0dce-8649-4fe8-b787-e1caa05f825e", "row_index": 103, "timestamp": "2019-08-21T13:34:04Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af6e0dce-8649-4fe8-b787-e1caa05f825e", "eventTime": "2019-08-21T13:34:04Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "181155-58b7-4040-a724-96f4abdb2fbb", "record_id": "flaws_cloudtrail:0000104:181155-58b7-4040-a724-96f4abdb2fbb", "row_index": 104, "timestamp": "2019-08-21T13:34:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1197, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "181155-58b7-4040-a724-96f4abdb2fbb", "eventTime": "2019-08-21T13:34:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "181155-58b7-4040-a724-96f4abdb2fbb", "record_id": "flaws_cloudtrail:0000105:181155-58b7-4040-a724-96f4abdb2fbb", "row_index": 105, "timestamp": "2019-08-21T13:34:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1197, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "181155-58b7-4040-a724-96f4abdb2fbb", "eventTime": "2019-08-21T13:34:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec7c02a9-3cf2-4b68-82a5-8fe7d5aad652", "record_id": "flaws_cloudtrail:0000106:ec7c02a9-3cf2-4b68-82a5-8fe7d5aad652", "row_index": 106, "timestamp": "2019-08-21T13:34:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec7c02a9-3cf2-4b68-82a5-8fe7d5aad652", "eventTime": "2019-08-21T13:34:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c6b907-aefa-448c-a3ff-9fe488ae2f19", "record_id": "flaws_cloudtrail:0000107:f9c6b907-aefa-448c-a3ff-9fe488ae2f19", "row_index": 107, "timestamp": "2019-08-21T13:34:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c6b907-aefa-448c-a3ff-9fe488ae2f19", "eventTime": "2019-08-21T13:34:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec7c02a9-3cf2-4b68-82a5-8fe7d5aad652", "record_id": "flaws_cloudtrail:0000108:ec7c02a9-3cf2-4b68-82a5-8fe7d5aad652", "row_index": 108, "timestamp": "2019-08-21T13:34:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1099, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec7c02a9-3cf2-4b68-82a5-8fe7d5aad652", "eventTime": "2019-08-21T13:34:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c6b907-aefa-448c-a3ff-9fe488ae2f19", "record_id": "flaws_cloudtrail:0000109:f9c6b907-aefa-448c-a3ff-9fe488ae2f19", "row_index": 109, "timestamp": "2019-08-21T13:34:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c6b907-aefa-448c-a3ff-9fe488ae2f19", "eventTime": "2019-08-21T13:34:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34834a2-8142-48ac-823e-72846fd332d4", "record_id": "flaws_cloudtrail:0000110:e34834a2-8142-48ac-823e-72846fd332d4", "row_index": 110, "timestamp": "2019-08-21T13:34:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34834a2-8142-48ac-823e-72846fd332d4", "eventTime": "2019-08-21T13:34:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e34834a2-8142-48ac-823e-72846fd332d4", "record_id": "flaws_cloudtrail:0000111:e34834a2-8142-48ac-823e-72846fd332d4", "row_index": 111, "timestamp": "2019-08-21T13:34:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1183, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e34834a2-8142-48ac-823e-72846fd332d4", "eventTime": "2019-08-21T13:34:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45483c-9b80-455f-853e-a049dd7e23b1", "record_id": "flaws_cloudtrail:0000112:45483c-9b80-455f-853e-a049dd7e23b1", "row_index": 112, "timestamp": "2019-08-21T13:34:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45483c-9b80-455f-853e-a049dd7e23b1", "eventTime": "2019-08-21T13:34:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45483c-9b80-455f-853e-a049dd7e23b1", "record_id": "flaws_cloudtrail:0000113:45483c-9b80-455f-853e-a049dd7e23b1", "row_index": 113, "timestamp": "2019-08-21T13:34:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45483c-9b80-455f-853e-a049dd7e23b1", "eventTime": "2019-08-21T13:34:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f7a686-933a-4383-9e1b-f2876206ae62", "record_id": "flaws_cloudtrail:0000114:c2f7a686-933a-4383-9e1b-f2876206ae62", "row_index": 114, "timestamp": "2019-08-21T13:34:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f7a686-933a-4383-9e1b-f2876206ae62", "eventTime": "2019-08-21T13:34:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8699a5e3-ea5d-4cdd-ad86-b61eab7c8d5d", "record_id": "flaws_cloudtrail:0000115:8699a5e3-ea5d-4cdd-ad86-b61eab7c8d5d", "row_index": 115, "timestamp": "2019-08-21T13:34:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8699a5e3-ea5d-4cdd-ad86-b61eab7c8d5d", "eventTime": "2019-08-21T13:34:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: r0GiEhnK9pMAJzmHT_pxJ02m9dSsjpSWB2oZ8iseYL1dsBgyr5aRUSwy3ClhxxyJE5dYWbmTp2PcJxKfEQvtvS64Ja7dc9oAtll9FtuaIAjTpDI0skmj6VChRsTm7RPmSUnd0wEK6BEqJTQrgK4BPwHZGfipSq6b3K5ERn9mXuJeeKFXlPVNLBmPX0iOWBnHB2GqlKDK0pIVvgO9iFl34El7IbqwRK4usLhL9UmmQ0-WVfR-J-3D_RnZjtxD5ZNdTG8Dv49SegJdM_K_uvep9UpMO5iLAkNi1EZDL0-PJdkwhdMYgU2D3-oUq6vc4q0Tnw0tkTK_EF3nK-Mn32ChgIBRP-csdIRf5zqgSASZOJ2gZO_6IOM0SH1CJs4MD4zgBGXPqbChqOUX4BGFMscdOw-0v4_fmfD1Vm3olEkTHSWuCXYjavWVQmzounSROM6MEz8R471hUAKhukDv71BN0tXqb1xsk9GXUdnqppNhE4Zoi_WXxWsD1SVl5TWmQnbR82mt_NpxjnKcdGlET1qmH0Db5E7wJVQ-dJwPFBJKvsiJN3wKNwoV1nnjLmPVm-sbl0TmQChZ9dLjTkEdR74nbDxnKRt7NPDiQX7teK8PAmUFLrOpghwqM_JdMZYdsb3Y1PZgfD2_mBvvH4kazQDC_3Y6s2hSJQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "953e543c-270f-42bb-84ff-ad97f6ba1a7a", "record_id": "flaws_cloudtrail:0000116:953e543c-270f-42bb-84ff-ad97f6ba1a7a", "row_index": 116, "timestamp": "2019-08-21T13:34:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "953e543c-270f-42bb-84ff-ad97f6ba1a7a", "eventTime": "2019-08-21T13:34:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2f7a686-933a-4383-9e1b-f2876206ae62", "record_id": "flaws_cloudtrail:0000117:c2f7a686-933a-4383-9e1b-f2876206ae62", "row_index": 117, "timestamp": "2019-08-21T13:34:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2f7a686-933a-4383-9e1b-f2876206ae62", "eventTime": "2019-08-21T13:34:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8699a5e3-ea5d-4cdd-ad86-b61eab7c8d5d", "record_id": "flaws_cloudtrail:0000118:8699a5e3-ea5d-4cdd-ad86-b61eab7c8d5d", "row_index": 118, "timestamp": "2019-08-21T13:34:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8699a5e3-ea5d-4cdd-ad86-b61eab7c8d5d", "eventTime": "2019-08-21T13:34:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: r0GiEhnK9pMAJzmHT_pxJ02m9dSsjpSWB2oZ8iseYL1dsBgyr5aRUSwy3ClhxxyJE5dYWbmTp2PcJxKfEQvtvS64Ja7dc9oAtll9FtuaIAjTpDI0skmj6VChRsTm7RPmSUnd0wEK6BEqJTQrgK4BPwHZGfipSq6b3K5ERn9mXuJeeKFXlPVNLBmPX0iOWBnHB2GqlKDK0pIVvgO9iFl34El7IbqwRK4usLhL9UmmQ0-WVfR-J-3D_RnZjtxD5ZNdTG8Dv49SegJdM_K_uvep9UpMO5iLAkNi1EZDL0-PJdkwhdMYgU2D3-oUq6vc4q0Tnw0tkTK_EF3nK-Mn32ChgIBRP-csdIRf5zqgSASZOJ2gZO_6IOM0SH1CJs4MD4zgBGXPqbChqOUX4BGFMscdOw-0v4_fmfD1Vm3olEkTHSWuCXYjavWVQmzounSROM6MEz8R471hUAKhukDv71BN0tXqb1xsk9GXUdnqppNhE4Zoi_WXxWsD1SVl5TWmQnbR82mt_NpxjnKcdGlET1qmH0Db5E7wJVQ-dJwPFBJKvsiJN3wKNwoV1nnjLmPVm-sbl0TmQChZ9dLjTkEdR74nbDxnKRt7NPDiQX7teK8PAmUFLrOpghwqM_JdMZYdsb3Y1PZgfD2_mBvvH4kazQDC_3Y6s2hSJQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "953e543c-270f-42bb-84ff-ad97f6ba1a7a", "record_id": "flaws_cloudtrail:0000119:953e543c-270f-42bb-84ff-ad97f6ba1a7a", "row_index": 119, "timestamp": "2019-08-21T13:34:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1184, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "953e543c-270f-42bb-84ff-ad97f6ba1a7a", "eventTime": "2019-08-21T13:34:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64cb00f-3160-4f2c-ba9e-3854399ad599", "record_id": "flaws_cloudtrail:0000120:e64cb00f-3160-4f2c-ba9e-3854399ad599", "row_index": 120, "timestamp": "2019-08-21T13:34:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64cb00f-3160-4f2c-ba9e-3854399ad599", "eventTime": "2019-08-21T13:34:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e64cb00f-3160-4f2c-ba9e-3854399ad599", "record_id": "flaws_cloudtrail:0000121:e64cb00f-3160-4f2c-ba9e-3854399ad599", "row_index": 121, "timestamp": "2019-08-21T13:34:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e64cb00f-3160-4f2c-ba9e-3854399ad599", "eventTime": "2019-08-21T13:34:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a89efc4a-cccc-425b-a055-75a1896d943d", "record_id": "flaws_cloudtrail:0000122:a89efc4a-cccc-425b-a055-75a1896d943d", "row_index": 122, "timestamp": "2019-08-21T13:34:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a89efc4a-cccc-425b-a055-75a1896d943d", "eventTime": "2019-08-21T13:34:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a89efc4a-cccc-425b-a055-75a1896d943d", "record_id": "flaws_cloudtrail:0000123:a89efc4a-cccc-425b-a055-75a1896d943d", "row_index": 123, "timestamp": "2019-08-21T13:34:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a89efc4a-cccc-425b-a055-75a1896d943d", "eventTime": "2019-08-21T13:34:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d365bb5a-f771-4658-9294-32ad54de4465", "record_id": "flaws_cloudtrail:0000124:d365bb5a-f771-4658-9294-32ad54de4465", "row_index": 124, "timestamp": "2019-08-21T13:34:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d365bb5a-f771-4658-9294-32ad54de4465", "eventTime": "2019-08-21T13:34:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d365bb5a-f771-4658-9294-32ad54de4465", "record_id": "flaws_cloudtrail:0000125:d365bb5a-f771-4658-9294-32ad54de4465", "row_index": 125, "timestamp": "2019-08-21T13:34:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d365bb5a-f771-4658-9294-32ad54de4465", "eventTime": "2019-08-21T13:34:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c198b6f-1245-47cc-b8ac-4a646ab1afa0", "record_id": "flaws_cloudtrail:0000126:3c198b6f-1245-47cc-b8ac-4a646ab1afa0", "row_index": 126, "timestamp": "2019-08-21T13:34:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c198b6f-1245-47cc-b8ac-4a646ab1afa0", "eventTime": "2019-08-21T13:34:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c198b6f-1245-47cc-b8ac-4a646ab1afa0", "record_id": "flaws_cloudtrail:0000127:3c198b6f-1245-47cc-b8ac-4a646ab1afa0", "row_index": 127, "timestamp": "2019-08-21T13:34:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c198b6f-1245-47cc-b8ac-4a646ab1afa0", "eventTime": "2019-08-21T13:34:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5df14aa5-b5ca-4441-ae9f-3270a6520892", "record_id": "flaws_cloudtrail:0000128:5df14aa5-b5ca-4441-ae9f-3270a6520892", "row_index": 128, "timestamp": "2019-08-21T13:34:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5df14aa5-b5ca-4441-ae9f-3270a6520892", "eventTime": "2019-08-21T13:34:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5df14aa5-b5ca-4441-ae9f-3270a6520892", "record_id": "flaws_cloudtrail:0000129:5df14aa5-b5ca-4441-ae9f-3270a6520892", "row_index": 129, "timestamp": "2019-08-21T13:34:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5df14aa5-b5ca-4441-ae9f-3270a6520892", "eventTime": "2019-08-21T13:34:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "784da598-ea10-4285-856a-972ee5dbe9ff", "record_id": "flaws_cloudtrail:0000130:784da598-ea10-4285-856a-972ee5dbe9ff", "row_index": 130, "timestamp": "2019-08-21T13:34:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "784da598-ea10-4285-856a-972ee5dbe9ff", "eventTime": "2019-08-21T13:34:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "784da598-ea10-4285-856a-972ee5dbe9ff", "record_id": "flaws_cloudtrail:0000131:784da598-ea10-4285-856a-972ee5dbe9ff", "row_index": 131, "timestamp": "2019-08-21T13:34:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "784da598-ea10-4285-856a-972ee5dbe9ff", "eventTime": "2019-08-21T13:34:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7314a69-3d81-4359-86c6-12985f3b0d", "record_id": "flaws_cloudtrail:0000132:d7314a69-3d81-4359-86c6-12985f3b0d", "row_index": 132, "timestamp": "2019-08-21T13:34:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1198, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7314a69-3d81-4359-86c6-12985f3b0d", "eventTime": "2019-08-21T13:34:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7314a69-3d81-4359-86c6-12985f3b0d", "record_id": "flaws_cloudtrail:0000133:d7314a69-3d81-4359-86c6-12985f3b0d", "row_index": 133, "timestamp": "2019-08-21T13:34:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1198, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7314a69-3d81-4359-86c6-12985f3b0d", "eventTime": "2019-08-21T13:34:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecdce2d0-2bfe-485e-937b-a67e98faf6be", "record_id": "flaws_cloudtrail:0000134:ecdce2d0-2bfe-485e-937b-a67e98faf6be", "row_index": 134, "timestamp": "2019-08-21T13:34:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecdce2d0-2bfe-485e-937b-a67e98faf6be", "eventTime": "2019-08-21T13:34:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecdce2d0-2bfe-485e-937b-a67e98faf6be", "record_id": "flaws_cloudtrail:0000135:ecdce2d0-2bfe-485e-937b-a67e98faf6be", "row_index": 135, "timestamp": "2019-08-21T13:34:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecdce2d0-2bfe-485e-937b-a67e98faf6be", "eventTime": "2019-08-21T13:34:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cba2b5ae-de5b-4871-ad0a-9725da51359f", "record_id": "flaws_cloudtrail:0000136:cba2b5ae-de5b-4871-ad0a-9725da51359f", "row_index": 136, "timestamp": "2019-08-21T13:34:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cba2b5ae-de5b-4871-ad0a-9725da51359f", "eventTime": "2019-08-21T13:34:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: orK9do_iUUdYxjj8UOfA77VHBcHyOCva6cG3-7F4xZWEmlAcnVbEtTMoLBn2QYVLBaoEWtfFCS9VDMOeYi1H0tvFtLqcf56Y6frmMztcKSP356zrgUWr3EqWWBs7F4zs58VQh7QjxHuau-o1nJk2cVrAk5vElDeDPPoMIKR5tV8rH26MZw9PrDY4b6BWVq3ptSZM84mEbsC2JjwDuq4a53RC_Vq7DJPDKUKSSsonYAFvD8E3w4IaRNlA1_hzt55lTXD4PJDQT3pMQXQrqs-7P-xZLXMT2ON7jIaiEnCo1pYQD2jyUzVArTt8vWVO_lUuFtoqi6fCSBqm7u9ng4-BjHbQTkLgqxPmATMe5IoCfPUwIPnzsWumxGUDyIFWIPo4YuyRPOGuC1BRWKHfCfmaHP2ijCjlfvUDLwIY-lDwdHOMqfAClrozJbVbx4it48hgEB120GK2BYdsCv9PdNG6R-lcMa21QEgVNsrlh8Hd_-lXfw_3hMecZKSdJRnykRpxZNYalsLguCfw30nFwja56DhO1bwttKDaX7Zocg_-AM_TVRFsLe61h9kI2pp7bygGlc6MYh3YTWoy-InQGfY_1dwCS8nOqAnjOZswqNoVvgyKMcmsyXBFOHuSyf7j4a-WEFLXui49kcDfWv_qTBtIoh-Lv0_8", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cba2b5ae-de5b-4871-ad0a-9725da51359f", "record_id": "flaws_cloudtrail:0000137:cba2b5ae-de5b-4871-ad0a-9725da51359f", "row_index": 137, "timestamp": "2019-08-21T13:34:35Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cba2b5ae-de5b-4871-ad0a-9725da51359f", "eventTime": "2019-08-21T13:34:35Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: orK9do_iUUdYxjj8UOfA77VHBcHyOCva6cG3-7F4xZWEmlAcnVbEtTMoLBn2QYVLBaoEWtfFCS9VDMOeYi1H0tvFtLqcf56Y6frmMztcKSP356zrgUWr3EqWWBs7F4zs58VQh7QjxHuau-o1nJk2cVrAk5vElDeDPPoMIKR5tV8rH26MZw9PrDY4b6BWVq3ptSZM84mEbsC2JjwDuq4a53RC_Vq7DJPDKUKSSsonYAFvD8E3w4IaRNlA1_hzt55lTXD4PJDQT3pMQXQrqs-7P-xZLXMT2ON7jIaiEnCo1pYQD2jyUzVArTt8vWVO_lUuFtoqi6fCSBqm7u9ng4-BjHbQTkLgqxPmATMe5IoCfPUwIPnzsWumxGUDyIFWIPo4YuyRPOGuC1BRWKHfCfmaHP2ijCjlfvUDLwIY-lDwdHOMqfAClrozJbVbx4it48hgEB120GK2BYdsCv9PdNG6R-lcMa21QEgVNsrlh8Hd_-lXfw_3hMecZKSdJRnykRpxZNYalsLguCfw30nFwja56DhO1bwttKDaX7Zocg_-AM_TVRFsLe61h9kI2pp7bygGlc6MYh3YTWoy-InQGfY_1dwCS8nOqAnjOZswqNoVvgyKMcmsyXBFOHuSyf7j4a-WEFLXui49kcDfWv_qTBtIoh-Lv0_8", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "854a90bd-a655-45e4-a5b1-27be182c585a", "record_id": "flaws_cloudtrail:0000138:854a90bd-a655-45e4-a5b1-27be182c585a", "row_index": 138, "timestamp": "2019-08-21T13:34:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "854a90bd-a655-45e4-a5b1-27be182c585a", "eventTime": "2019-08-21T13:34:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42bc1dc1-fc7b-4256-987f-29d0fb27bf6b", "record_id": "flaws_cloudtrail:0000139:42bc1dc1-fc7b-4256-987f-29d0fb27bf6b", "row_index": 139, "timestamp": "2019-08-21T13:34:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1939, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42bc1dc1-fc7b-4256-987f-29d0fb27bf6b", "eventTime": "2019-08-21T13:34:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: JTS62Xv-BhZul0ecEnnNT0CKM50cFo6BnRSlXICodXeSC09yqjZ3hR9JgdHYO5pD-gHzfoKZVY_lst5XypBIhnFLdY6OBPbVhRt5U4pzSylWHtivkAZkNof64XDH2XgFdydF0fIX3m6Bvxyg0_INP0FYlHpi724smak5TkkUL_7KvUAgL90wdMFMlLMx4G8fx6qjRMq_AChpYal3ckCLX8jjBR6NEm8h4slRU4aHKDWlDlaNPJaFyxWtAeTwHVieQgVeytgJpyWy5l7oKy-iXtocxKSGt1KZW_eOA4yi2RJTPPtt1svjYggIfYxU_JqOq7jiM6LirWu2lJv4M9VzCllg6BppQhGFfqt99NWvuXTkMC_iYLBmuyPVmduo_skFFtGf7UUDd73zO5Cp4uHPluKTe6y-G7_yNRe3VGuqgLZMGYEYzIq5frQhIDk29meyhIk5hgy3dpbbuK7E-uqVJwhVWBUhboyOFFXdJ_YasoDl4R5ft3aT3GH9FPJhMQsrMSS7HUKNQfE1UD3b93sBCpX-U5irsPVYMoeNKDJEKVpMqJNd2AKW9i9xEfnTXxofcUih43MeNSTdeC_ZbbXxUgkunekI9_v3AqNZLOTrqNlhocBd60Hg-YBPveLD0pJ6Ve_BnEoMt6YDK3xDxKZKEhaCRoY80xE", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "854a90bd-a655-45e4-a5b1-27be182c585a", "record_id": "flaws_cloudtrail:0000140:854a90bd-a655-45e4-a5b1-27be182c585a", "row_index": 140, "timestamp": "2019-08-21T13:34:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "854a90bd-a655-45e4-a5b1-27be182c585a", "eventTime": "2019-08-21T13:34:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42bc1dc1-fc7b-4256-987f-29d0fb27bf6b", "record_id": "flaws_cloudtrail:0000141:42bc1dc1-fc7b-4256-987f-29d0fb27bf6b", "row_index": 141, "timestamp": "2019-08-21T13:34:36Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1939, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42bc1dc1-fc7b-4256-987f-29d0fb27bf6b", "eventTime": "2019-08-21T13:34:36Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: JTS62Xv-BhZul0ecEnnNT0CKM50cFo6BnRSlXICodXeSC09yqjZ3hR9JgdHYO5pD-gHzfoKZVY_lst5XypBIhnFLdY6OBPbVhRt5U4pzSylWHtivkAZkNof64XDH2XgFdydF0fIX3m6Bvxyg0_INP0FYlHpi724smak5TkkUL_7KvUAgL90wdMFMlLMx4G8fx6qjRMq_AChpYal3ckCLX8jjBR6NEm8h4slRU4aHKDWlDlaNPJaFyxWtAeTwHVieQgVeytgJpyWy5l7oKy-iXtocxKSGt1KZW_eOA4yi2RJTPPtt1svjYggIfYxU_JqOq7jiM6LirWu2lJv4M9VzCllg6BppQhGFfqt99NWvuXTkMC_iYLBmuyPVmduo_skFFtGf7UUDd73zO5Cp4uHPluKTe6y-G7_yNRe3VGuqgLZMGYEYzIq5frQhIDk29meyhIk5hgy3dpbbuK7E-uqVJwhVWBUhboyOFFXdJ_YasoDl4R5ft3aT3GH9FPJhMQsrMSS7HUKNQfE1UD3b93sBCpX-U5irsPVYMoeNKDJEKVpMqJNd2AKW9i9xEfnTXxofcUih43MeNSTdeC_ZbbXxUgkunekI9_v3AqNZLOTrqNlhocBd60Hg-YBPveLD0pJ6Ve_BnEoMt6YDK3xDxKZKEhaCRoY80xE", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332062d4a-81f3-41f9-a821-7df8e0a2dad1", "record_id": "flaws_cloudtrail:0000142:332062d4a-81f3-41f9-a821-7df8e0a2dad1", "row_index": 142, "timestamp": "2019-08-21T13:34:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332062d4a-81f3-41f9-a821-7df8e0a2dad1", "eventTime": "2019-08-21T13:34:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "332062d4a-81f3-41f9-a821-7df8e0a2dad1", "record_id": "flaws_cloudtrail:0000143:332062d4a-81f3-41f9-a821-7df8e0a2dad1", "row_index": 143, "timestamp": "2019-08-21T13:34:37Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "332062d4a-81f3-41f9-a821-7df8e0a2dad1", "eventTime": "2019-08-21T13:34:37Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a781a4-614a-4ed3-9d36-473c93a27aa2", "record_id": "flaws_cloudtrail:0000144:c4a781a4-614a-4ed3-9d36-473c93a27aa2", "row_index": 144, "timestamp": "2019-08-21T13:34:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a781a4-614a-4ed3-9d36-473c93a27aa2", "eventTime": "2019-08-21T13:34:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a781a4-614a-4ed3-9d36-473c93a27aa2", "record_id": "flaws_cloudtrail:0000145:c4a781a4-614a-4ed3-9d36-473c93a27aa2", "row_index": 145, "timestamp": "2019-08-21T13:34:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a781a4-614a-4ed3-9d36-473c93a27aa2", "eventTime": "2019-08-21T13:34:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4efeec4-ca97-4cfa-9a6a-521697c5522d", "record_id": "flaws_cloudtrail:0000146:f4efeec4-ca97-4cfa-9a6a-521697c5522d", "row_index": 146, "timestamp": "2019-08-21T13:34:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4efeec4-ca97-4cfa-9a6a-521697c5522d", "eventTime": "2019-08-21T13:34:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4efeec4-ca97-4cfa-9a6a-521697c5522d", "record_id": "flaws_cloudtrail:0000147:f4efeec4-ca97-4cfa-9a6a-521697c5522d", "row_index": 147, "timestamp": "2019-08-21T13:34:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4efeec4-ca97-4cfa-9a6a-521697c5522d", "eventTime": "2019-08-21T13:34:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb75fb5f-d10d-4586-af60-9c7e000bb27a", "record_id": "flaws_cloudtrail:0000148:cb75fb5f-d10d-4586-af60-9c7e000bb27a", "row_index": 148, "timestamp": "2019-08-21T13:34:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb75fb5f-d10d-4586-af60-9c7e000bb27a", "eventTime": "2019-08-21T13:34:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: j_n3VCvcPPRpJyyKL64idRlp3H-oV3W8LYNmn25LRY2CQ7DI5FY5sJv59c-Ptb7loCXiI2MwT3qKniw2zkw3kORNlS_qYdAt--GKSkpdnAjOQexv3sIPNOOk3jqjNvE1QmUvvSicU94accwnc9xkbbwCcxeu7dWhzGyLqvH8r1dQN_7JrUTxR5j0wVqexmJDCD0PddgL31luGbAsYfx3r3UdEmna36ZcBNEYN0cRENzssde7GFo1cxWLc0DtqfzcP3CTgyy9XeqZOBtfPMZd09xohyp5H0xTEnwtuZ4xDtXx5ja_kYgIvC-KGIeB7ef-Mnp811W7ioiKyPiFXU9iCyB--mQuuGsJqgE1nO9uwxzET1pAzr8wmsNMLsiWmDd3VM7-Oa1zLD6-yp8qaxa5tegCColTPFLT19OMYAoaywpoZKKIFpCgjgy8UDXqFLYy5nKXqanye_sZ5bxNokE2ZjANsEMzG685PINr4-CBFaemY0FV65dzDPwsLLWRzTSdlSWkc32-kdFz_XyFq1jQtsCBCjWI6yHrmwQBrTOclswJ1kiX_Zg3oODzSXjEe6jEsiGPOxIb88jYLsMNWpREdkky7DPfurB68RTbq4ECGtt4LrWq6f_JzEfBExuJ8I-7-QVQRLnSKdnqBxIx8pUQW285Y6Mqtp4", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5ebe83-e93a-4eb1-a4e5-02a0c101dee4", "record_id": "flaws_cloudtrail:0000149:eb5ebe83-e93a-4eb1-a4e5-02a0c101dee4", "row_index": 149, "timestamp": "2019-08-21T13:34:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5ebe83-e93a-4eb1-a4e5-02a0c101dee4", "eventTime": "2019-08-21T13:34:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb75fb5f-d10d-4586-af60-9c7e000bb27a", "record_id": "flaws_cloudtrail:0000150:cb75fb5f-d10d-4586-af60-9c7e000bb27a", "row_index": 150, "timestamp": "2019-08-21T13:34:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb75fb5f-d10d-4586-af60-9c7e000bb27a", "eventTime": "2019-08-21T13:34:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: j_n3VCvcPPRpJyyKL64idRlp3H-oV3W8LYNmn25LRY2CQ7DI5FY5sJv59c-Ptb7loCXiI2MwT3qKniw2zkw3kORNlS_qYdAt--GKSkpdnAjOQexv3sIPNOOk3jqjNvE1QmUvvSicU94accwnc9xkbbwCcxeu7dWhzGyLqvH8r1dQN_7JrUTxR5j0wVqexmJDCD0PddgL31luGbAsYfx3r3UdEmna36ZcBNEYN0cRENzssde7GFo1cxWLc0DtqfzcP3CTgyy9XeqZOBtfPMZd09xohyp5H0xTEnwtuZ4xDtXx5ja_kYgIvC-KGIeB7ef-Mnp811W7ioiKyPiFXU9iCyB--mQuuGsJqgE1nO9uwxzET1pAzr8wmsNMLsiWmDd3VM7-Oa1zLD6-yp8qaxa5tegCColTPFLT19OMYAoaywpoZKKIFpCgjgy8UDXqFLYy5nKXqanye_sZ5bxNokE2ZjANsEMzG685PINr4-CBFaemY0FV65dzDPwsLLWRzTSdlSWkc32-kdFz_XyFq1jQtsCBCjWI6yHrmwQBrTOclswJ1kiX_Zg3oODzSXjEe6jEsiGPOxIb88jYLsMNWpREdkky7DPfurB68RTbq4ECGtt4LrWq6f_JzEfBExuJ8I-7-QVQRLnSKdnqBxIx8pUQW285Y6Mqtp4", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5ebe83-e93a-4eb1-a4e5-02a0c101dee4", "record_id": "flaws_cloudtrail:0000151:eb5ebe83-e93a-4eb1-a4e5-02a0c101dee4", "row_index": 151, "timestamp": "2019-08-21T13:34:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5ebe83-e93a-4eb1-a4e5-02a0c101dee4", "eventTime": "2019-08-21T13:34:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b597437d-d2e6-4152-b2df-1e61694166ae", "record_id": "flaws_cloudtrail:0000152:b597437d-d2e6-4152-b2df-1e61694166ae", "row_index": 152, "timestamp": "2019-08-21T13:34:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b597437d-d2e6-4152-b2df-1e61694166ae", "eventTime": "2019-08-21T13:34:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b597437d-d2e6-4152-b2df-1e61694166ae", "record_id": "flaws_cloudtrail:0000153:b597437d-d2e6-4152-b2df-1e61694166ae", "row_index": 153, "timestamp": "2019-08-21T13:34:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b597437d-d2e6-4152-b2df-1e61694166ae", "eventTime": "2019-08-21T13:34:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7e1c579-8c2d-453b-b772-dfe966ea0ae8", "record_id": "flaws_cloudtrail:0000154:c7e1c579-8c2d-453b-b772-dfe966ea0ae8", "row_index": 154, "timestamp": "2019-08-21T13:34:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7e1c579-8c2d-453b-b772-dfe966ea0ae8", "eventTime": "2019-08-21T13:34:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7e1c579-8c2d-453b-b772-dfe966ea0ae8", "record_id": "flaws_cloudtrail:0000155:c7e1c579-8c2d-453b-b772-dfe966ea0ae8", "row_index": 155, "timestamp": "2019-08-21T13:34:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7e1c579-8c2d-453b-b772-dfe966ea0ae8", "eventTime": "2019-08-21T13:34:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51237ae7-3dd4-4bba-9847-bf737cc6e558", "record_id": "flaws_cloudtrail:0000156:51237ae7-3dd4-4bba-9847-bf737cc6e558", "row_index": 156, "timestamp": "2019-08-21T13:34:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 508, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51237ae7-3dd4-4bba-9847-bf737cc6e558", "eventTime": "2019-08-21T13:34:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d72b7f1-ecb5-4390-baf3-4ece0b725633", "record_id": "flaws_cloudtrail:0000157:2d72b7f1-ecb5-4390-baf3-4ece0b725633", "row_index": 157, "timestamp": "2019-08-21T13:34:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d72b7f1-ecb5-4390-baf3-4ece0b725633", "eventTime": "2019-08-21T13:34:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "934cd7aa-b81a-42c3-9698-952b555082bd", "record_id": "flaws_cloudtrail:0000158:934cd7aa-b81a-42c3-9698-952b555082bd", "row_index": 158, "timestamp": "2019-08-21T13:34:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "934cd7aa-b81a-42c3-9698-952b555082bd", "eventTime": "2019-08-21T13:34:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: UwLgs-kAzZb__lx1DN2HjMsNGUpNP0655KMJj4Tp63C4akMid8xCXMFFLms4KpIsz3NEe7b4GX7oDCbxMwOya0ALXF-V1B25D4imik76gWGVjXKRcH_TuPAIpSeRMhwS5m5WDbZ5R_bFP3ru2_3SUh3kME6Fuz4IHBO8-hWvYXPr5ArBxMNA1XXlyP48IfHRGCed2_EKcrdhEnlthDsizavit7bkqlN7pRLUUbjw-hRUTJ3ugdIKwKQJkMwMjyj7mKACLysyloSGk3h1P7T6NPa1awr68X1ivyngcmZN0exYywsq34FZLAgBqIk6CuJf2ZMwTWHylye6258MHMC_73r_zbfNq8BbIbkwpLErjD1ifgMRfbjxtyH5NZhjjuatAEUQEzt2PAM3q2ITI80nM3v5OTFdi10_WJifHR9Fg1QfaYBxDnVOsAHuAEZmCy4SwJlyMLiNdpCep2-Q306L5a-QmdPP20zzHUcpooOK4pST1XZFpwPNKO67GniGj_41ipFecRPfzg9P4TGgut7tMoNnLB-XPmQbT7ebMXNuhsjca3cwSLfyX2narCw5aKxfWAMRGaUlVKsFbwlLO49nTEu6jnLbslUTPCMVeM1TZpP98GpoosIIEM6fuDUWOwVQvgSqcskDNzx-z8La_Vf-a62z-_ed6A", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d72b7f1-ecb5-4390-baf3-4ece0b725633", "record_id": "flaws_cloudtrail:0000159:2d72b7f1-ecb5-4390-baf3-4ece0b725633", "row_index": 159, "timestamp": "2019-08-21T13:34:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d72b7f1-ecb5-4390-baf3-4ece0b725633", "eventTime": "2019-08-21T13:34:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "934cd7aa-b81a-42c3-9698-952b555082bd", "record_id": "flaws_cloudtrail:0000160:934cd7aa-b81a-42c3-9698-952b555082bd", "row_index": 160, "timestamp": "2019-08-21T13:34:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "934cd7aa-b81a-42c3-9698-952b555082bd", "eventTime": "2019-08-21T13:34:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: UwLgs-kAzZb__lx1DN2HjMsNGUpNP0655KMJj4Tp63C4akMid8xCXMFFLms4KpIsz3NEe7b4GX7oDCbxMwOya0ALXF-V1B25D4imik76gWGVjXKRcH_TuPAIpSeRMhwS5m5WDbZ5R_bFP3ru2_3SUh3kME6Fuz4IHBO8-hWvYXPr5ArBxMNA1XXlyP48IfHRGCed2_EKcrdhEnlthDsizavit7bkqlN7pRLUUbjw-hRUTJ3ugdIKwKQJkMwMjyj7mKACLysyloSGk3h1P7T6NPa1awr68X1ivyngcmZN0exYywsq34FZLAgBqIk6CuJf2ZMwTWHylye6258MHMC_73r_zbfNq8BbIbkwpLErjD1ifgMRfbjxtyH5NZhjjuatAEUQEzt2PAM3q2ITI80nM3v5OTFdi10_WJifHR9Fg1QfaYBxDnVOsAHuAEZmCy4SwJlyMLiNdpCep2-Q306L5a-QmdPP20zzHUcpooOK4pST1XZFpwPNKO67GniGj_41ipFecRPfzg9P4TGgut7tMoNnLB-XPmQbT7ebMXNuhsjca3cwSLfyX2narCw5aKxfWAMRGaUlVKsFbwlLO49nTEu6jnLbslUTPCMVeM1TZpP98GpoosIIEM6fuDUWOwVQvgSqcskDNzx-z8La_Vf-a62z-_ed6A", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14daf3ce-8e10-43cd-94ba-6212b5c658ea", "record_id": "flaws_cloudtrail:0000161:14daf3ce-8e10-43cd-94ba-6212b5c658ea", "row_index": 161, "timestamp": "2019-08-21T13:34:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14daf3ce-8e10-43cd-94ba-6212b5c658ea", "eventTime": "2019-08-21T13:34:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14daf3ce-8e10-43cd-94ba-6212b5c658ea", "record_id": "flaws_cloudtrail:0000162:14daf3ce-8e10-43cd-94ba-6212b5c658ea", "row_index": 162, "timestamp": "2019-08-21T13:34:59Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14daf3ce-8e10-43cd-94ba-6212b5c658ea", "eventTime": "2019-08-21T13:34:59Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1272e203-a0c1-44b8-b58d-f3eeb2e9ea29", "record_id": "flaws_cloudtrail:0000163:1272e203-a0c1-44b8-b58d-f3eeb2e9ea29", "row_index": 163, "timestamp": "2019-08-21T13:35:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1272e203-a0c1-44b8-b58d-f3eeb2e9ea29", "eventTime": "2019-08-21T13:35:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1272e203-a0c1-44b8-b58d-f3eeb2e9ea29", "record_id": "flaws_cloudtrail:0000164:1272e203-a0c1-44b8-b58d-f3eeb2e9ea29", "row_index": 164, "timestamp": "2019-08-21T13:35:06Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1272e203-a0c1-44b8-b58d-f3eeb2e9ea29", "eventTime": "2019-08-21T13:35:06Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f004b741-0beb-4377-93a6-3b051dca7b2b", "record_id": "flaws_cloudtrail:0000165:f004b741-0beb-4377-93a6-3b051dca7b2b", "row_index": 165, "timestamp": "2019-08-21T13:35:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f004b741-0beb-4377-93a6-3b051dca7b2b", "eventTime": "2019-08-21T13:35:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f004b741-0beb-4377-93a6-3b051dca7b2b", "record_id": "flaws_cloudtrail:0000166:f004b741-0beb-4377-93a6-3b051dca7b2b", "row_index": 166, "timestamp": "2019-08-21T13:35:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f004b741-0beb-4377-93a6-3b051dca7b2b", "eventTime": "2019-08-21T13:35:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.4xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df69b9f7-6eec-4c69-a4a3-68c325bc4625", "record_id": "flaws_cloudtrail:0000167:df69b9f7-6eec-4c69-a4a3-68c325bc4625", "row_index": 167, "timestamp": "2019-08-21T13:35:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df69b9f7-6eec-4c69-a4a3-68c325bc4625", "eventTime": "2019-08-21T13:35:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df69b9f7-6eec-4c69-a4a3-68c325bc4625", "record_id": "flaws_cloudtrail:0000168:df69b9f7-6eec-4c69-a4a3-68c325bc4625", "row_index": 168, "timestamp": "2019-08-21T13:35:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df69b9f7-6eec-4c69-a4a3-68c325bc4625", "eventTime": "2019-08-21T13:35:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ca7048f-1aa1-48f0-aaa2-c8e039b03d5e", "record_id": "flaws_cloudtrail:0000169:2ca7048f-1aa1-48f0-aaa2-c8e039b03d5e", "row_index": 169, "timestamp": "2019-08-21T13:35:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ca7048f-1aa1-48f0-aaa2-c8e039b03d5e", "eventTime": "2019-08-21T13:35:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: o9QwRDmVhebzNN29vWpeWpOuq69C6gtAgtbgeUY4gERw3vlt0peJD65z8YF-66qZhv7kqW6Ce8O4fbvyqVHTewqUbKfbvVrd-0HwGyoenfb2I2zVwNwo34gaKMGuEPjyCrN0xv-PpxuBIxxFSYzBePK2N1IemxbJ2sMc7WLw4nPqFQIXUds5EFsOpshJ6EEafRY-Ie4hOJ1qICwOQNErtgjMB3zti6IgAqHIHzqJGatfgdpIc4HYT_11ALRbkhrMQ-MPUhRZ9INQY2CHm3QbyPudXXgcaBfzaCbVPNlI79KYVQZ3XZyfg3zwb3ywUbEWBsit_1hipUlIVZyTipXS87ulE4g2ZhAArj9G31-W37erDaHvSPFR1OSK61Vk8sufL6YLPM9ISEQNKXhprtTpqk5wdBlVz4gGCoW11lLGlfHN0pUpKbqlm6JhGKFUT3Mw5Pox1LO2AE_JbGTgKv5I04MTWdSFqR6-t6rzd5-nI8WvO-DC_RLke5IU0wCwbgjtkmuIynnSVnjprTw8ghToPeQpWF9-Tia8hY4PvXfe-ZqSgWw57c7c5b-klSrfHGOe8fYVPw942I_Feg1qa2UkbPlYXKbNKo4MioQ7FApITV3gsOgGLRzbTSFfkvgxd-bTpoQSGP-jVg-FQQIa2lXergfCgSu7n1E", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd152dfb-dd9e-4fdb-8b70-b727d6aaa924", "record_id": "flaws_cloudtrail:0000170:dd152dfb-dd9e-4fdb-8b70-b727d6aaa924", "row_index": 170, "timestamp": "2019-08-21T13:35:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd152dfb-dd9e-4fdb-8b70-b727d6aaa924", "eventTime": "2019-08-21T13:35:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ca7048f-1aa1-48f0-aaa2-c8e039b03d5e", "record_id": "flaws_cloudtrail:0000171:2ca7048f-1aa1-48f0-aaa2-c8e039b03d5e", "row_index": 171, "timestamp": "2019-08-21T13:35:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ca7048f-1aa1-48f0-aaa2-c8e039b03d5e", "eventTime": "2019-08-21T13:35:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: o9QwRDmVhebzNN29vWpeWpOuq69C6gtAgtbgeUY4gERw3vlt0peJD65z8YF-66qZhv7kqW6Ce8O4fbvyqVHTewqUbKfbvVrd-0HwGyoenfb2I2zVwNwo34gaKMGuEPjyCrN0xv-PpxuBIxxFSYzBePK2N1IemxbJ2sMc7WLw4nPqFQIXUds5EFsOpshJ6EEafRY-Ie4hOJ1qICwOQNErtgjMB3zti6IgAqHIHzqJGatfgdpIc4HYT_11ALRbkhrMQ-MPUhRZ9INQY2CHm3QbyPudXXgcaBfzaCbVPNlI79KYVQZ3XZyfg3zwb3ywUbEWBsit_1hipUlIVZyTipXS87ulE4g2ZhAArj9G31-W37erDaHvSPFR1OSK61Vk8sufL6YLPM9ISEQNKXhprtTpqk5wdBlVz4gGCoW11lLGlfHN0pUpKbqlm6JhGKFUT3Mw5Pox1LO2AE_JbGTgKv5I04MTWdSFqR6-t6rzd5-nI8WvO-DC_RLke5IU0wCwbgjtkmuIynnSVnjprTw8ghToPeQpWF9-Tia8hY4PvXfe-ZqSgWw57c7c5b-klSrfHGOe8fYVPw942I_Feg1qa2UkbPlYXKbNKo4MioQ7FApITV3gsOgGLRzbTSFfkvgxd-bTpoQSGP-jVg-FQQIa2lXergfCgSu7n1E", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd152dfb-dd9e-4fdb-8b70-b727d6aaa924", "record_id": "flaws_cloudtrail:0000172:dd152dfb-dd9e-4fdb-8b70-b727d6aaa924", "row_index": 172, "timestamp": "2019-08-21T13:35:11Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd152dfb-dd9e-4fdb-8b70-b727d6aaa924", "eventTime": "2019-08-21T13:35:11Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11af23a6-eafe-44c6-96e3-b2e112445ee", "record_id": "flaws_cloudtrail:0000173:11af23a6-eafe-44c6-96e3-b2e112445ee", "row_index": 173, "timestamp": "2019-08-21T13:35:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11af23a6-eafe-44c6-96e3-b2e112445ee", "eventTime": "2019-08-21T13:35:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11af23a6-eafe-44c6-96e3-b2e112445ee", "record_id": "flaws_cloudtrail:0000174:11af23a6-eafe-44c6-96e3-b2e112445ee", "row_index": 174, "timestamp": "2019-08-21T13:35:13Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11af23a6-eafe-44c6-96e3-b2e112445ee", "eventTime": "2019-08-21T13:35:13Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ae942b9-346c-49fa-b677-ce9568b5a9ba", "record_id": "flaws_cloudtrail:0000175:4ae942b9-346c-49fa-b677-ce9568b5a9ba", "row_index": 175, "timestamp": "2019-08-21T13:35:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1941, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ae942b9-346c-49fa-b677-ce9568b5a9ba", "eventTime": "2019-08-21T13:35:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: J3lJdDmG2ooEf7nmizEbhQUzl7-ra7KZ1Z-jdSs80YyorhpcKj2B78Cjs5J7eVlRiXtXNWRq7bCHs5PqU9uHu5IKfiygGO4Sa08g0CuGKCSbCGtWuoxV8K0efiEZQxgbeCZNCQcJvnKg1B2cbTZstoJTyMv7-uGGDNR4HaJrSRXmRwyKaVjaBxd1dnT7V6gZHIYhfAGVLZC7mynUgYXrnu0izbSuMEFp_a9iLIhYI_YAGImQFsFkEyZ3KfvMmKG3Bj7V2Zyuex4M-tsYpeL57Fc4lAtzKL4W-qcov_Z51-S73GgrOHRQhhnV-m5skWgdbM5hL0GMBEcThEJPDh9rRSTLae-JleYOc5vLaVDLXTnrljbupE_D3K6AU8qgE3yMSbajp6_puT614C0I54mGPkAX1C6M3NTAqI7JV9RVjfgMPyVtFS7eJFSX54lNkNhCZ4n9x3dLnKV70I9sFGWPEeN1dvrBhc0d-rIqI7TCV5Fvg9Cqec5n4veLmDKJqtScBP5z0h21gCFJ1KLnc02O3i8elPK1BBUZByEIf73c9vZG03mptQ3jJ2h3G091G9-cBquE3npxvEVODUYXLf3CAKCOFZ4IIzhgHQ4b9CgAsbVq1hKGH-OFMm7Y3bloa0_W63AhHB3NspgypZyX-BO9JTIZW4Nfr9mI", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ae942b9-346c-49fa-b677-ce9568b5a9ba", "record_id": "flaws_cloudtrail:0000176:4ae942b9-346c-49fa-b677-ce9568b5a9ba", "row_index": 176, "timestamp": "2019-08-21T13:35:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1941, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ae942b9-346c-49fa-b677-ce9568b5a9ba", "eventTime": "2019-08-21T13:35:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: J3lJdDmG2ooEf7nmizEbhQUzl7-ra7KZ1Z-jdSs80YyorhpcKj2B78Cjs5J7eVlRiXtXNWRq7bCHs5PqU9uHu5IKfiygGO4Sa08g0CuGKCSbCGtWuoxV8K0efiEZQxgbeCZNCQcJvnKg1B2cbTZstoJTyMv7-uGGDNR4HaJrSRXmRwyKaVjaBxd1dnT7V6gZHIYhfAGVLZC7mynUgYXrnu0izbSuMEFp_a9iLIhYI_YAGImQFsFkEyZ3KfvMmKG3Bj7V2Zyuex4M-tsYpeL57Fc4lAtzKL4W-qcov_Z51-S73GgrOHRQhhnV-m5skWgdbM5hL0GMBEcThEJPDh9rRSTLae-JleYOc5vLaVDLXTnrljbupE_D3K6AU8qgE3yMSbajp6_puT614C0I54mGPkAX1C6M3NTAqI7JV9RVjfgMPyVtFS7eJFSX54lNkNhCZ4n9x3dLnKV70I9sFGWPEeN1dvrBhc0d-rIqI7TCV5Fvg9Cqec5n4veLmDKJqtScBP5z0h21gCFJ1KLnc02O3i8elPK1BBUZByEIf73c9vZG03mptQ3jJ2h3G091G9-cBquE3npxvEVODUYXLf3CAKCOFZ4IIzhgHQ4b9CgAsbVq1hKGH-OFMm7Y3bloa0_W63AhHB3NspgypZyX-BO9JTIZW4Nfr9mI", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbcdd7e-2e72-4692-8a56-e7a3a8418b68", "record_id": "flaws_cloudtrail:0000177:ebbcdd7e-2e72-4692-8a56-e7a3a8418b68", "row_index": 177, "timestamp": "2019-08-21T13:35:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbcdd7e-2e72-4692-8a56-e7a3a8418b68", "eventTime": "2019-08-21T13:35:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebbcdd7e-2e72-4692-8a56-e7a3a8418b68", "record_id": "flaws_cloudtrail:0000178:ebbcdd7e-2e72-4692-8a56-e7a3a8418b68", "row_index": 178, "timestamp": "2019-08-21T13:35:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebbcdd7e-2e72-4692-8a56-e7a3a8418b68", "eventTime": "2019-08-21T13:35:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79ecd925-ba36-4df3-838e-ec0ba3d26ea1", "record_id": "flaws_cloudtrail:0000179:79ecd925-ba36-4df3-838e-ec0ba3d26ea1", "row_index": 179, "timestamp": "2019-08-21T13:35:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1940, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79ecd925-ba36-4df3-838e-ec0ba3d26ea1", "eventTime": "2019-08-21T13:35:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: n9JRTWVrnP8KOBkt6kS2nE9KpAvW_Z1PrWqgcY3vp7urKH15oPIrcONIrKjIQLuYu1nOsC0HBDjpWxBgqqs7chx_gLSZc-eKb3hltKelPmUAomQJVaBhweUkGimzXfgW_8DTu82EZiZXEjk2EAyX2N4HjuHLWoOJ3wEmwiQibZLsUtMBDvyrWLyKhujcZRP0mgFDcIx3VnCAZLqaUhVMQ5hbmOR52IR32i_NLOgZpCuiOn0FYU9U7d9o_cyCbAvfrhn5vDUgltRqBrBVnzWfPR_GA_s7g5zQs94d7d_5CF3n8_AmSQt64dib4nubshgWY3gp_nncPvjAEQ8AmEFXl3QJJr36uvRZ7gyhmiA7WwM5eD2jfJYuxcCDmYuC3Xol5giLAa8u_ATJgXtzvll5wu6VSF7BYuQjX4-8JOWb57Pe19ZefVanDatj0jV5rIS0xvai2HHYhOk-HUP0TbxmyhqN63F6MsCfPMV15wlmOld-DjF8oR45UFLZnaRoPDzvAYFiLaAeVcbR0LWVVRTR1BBcZmDnqxZCwrAFBnffbE2yk90mnu7VEne3kkDRi9o9V9TgBpqkySiub6AgaM1oaJBBfupzB9reDV-bwSgKDQ-7VpzwVmfs7my24KzathS9ZqqRhhl3_pFv3xfokwBqEmBHQmqq1o94", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79ecd925-ba36-4df3-838e-ec0ba3d26ea1", "record_id": "flaws_cloudtrail:0000180:79ecd925-ba36-4df3-838e-ec0ba3d26ea1", "row_index": 180, "timestamp": "2019-08-21T13:35:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1940, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79ecd925-ba36-4df3-838e-ec0ba3d26ea1", "eventTime": "2019-08-21T13:35:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: n9JRTWVrnP8KOBkt6kS2nE9KpAvW_Z1PrWqgcY3vp7urKH15oPIrcONIrKjIQLuYu1nOsC0HBDjpWxBgqqs7chx_gLSZc-eKb3hltKelPmUAomQJVaBhweUkGimzXfgW_8DTu82EZiZXEjk2EAyX2N4HjuHLWoOJ3wEmwiQibZLsUtMBDvyrWLyKhujcZRP0mgFDcIx3VnCAZLqaUhVMQ5hbmOR52IR32i_NLOgZpCuiOn0FYU9U7d9o_cyCbAvfrhn5vDUgltRqBrBVnzWfPR_GA_s7g5zQs94d7d_5CF3n8_AmSQt64dib4nubshgWY3gp_nncPvjAEQ8AmEFXl3QJJr36uvRZ7gyhmiA7WwM5eD2jfJYuxcCDmYuC3Xol5giLAa8u_ATJgXtzvll5wu6VSF7BYuQjX4-8JOWb57Pe19ZefVanDatj0jV5rIS0xvai2HHYhOk-HUP0TbxmyhqN63F6MsCfPMV15wlmOld-DjF8oR45UFLZnaRoPDzvAYFiLaAeVcbR0LWVVRTR1BBcZmDnqxZCwrAFBnffbE2yk90mnu7VEne3kkDRi9o9V9TgBpqkySiub6AgaM1oaJBBfupzB9reDV-bwSgKDQ-7VpzwVmfs7my24KzathS9ZqqRhhl3_pFv3xfokwBqEmBHQmqq1o94", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e3e3ef-d1d6-4ccc-b766-6d4cef4b2fbe", "record_id": "flaws_cloudtrail:0000181:a2e3e3ef-d1d6-4ccc-b766-6d4cef4b2fbe", "row_index": 181, "timestamp": "2019-08-21T13:35:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e3e3ef-d1d6-4ccc-b766-6d4cef4b2fbe", "eventTime": "2019-08-21T13:35:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OYc9QKudjuVLuOkiWcxMAEh8im73T8eALAAYS3pkYQQd7GNwXweBr03dtRltmm6NTt9mvYORof_lEgtLi3BUXan07-asyjGoLum3vQ0TQu-cNJNogaV1PXN2ZHDoLR6ZCOUANvbVScAmEp3HYh2kkELwIXU2SQmcvtt-FEjiHoT3F6hRFb24Z1aiAZVyFE0xj_buACgR_dsHlx92tMIAm0xA0Leyz4FG3yfeIPxCaqIlBOOeEypJtQUDYikl902R1CNexdnApmTROfYTaJGJ-4gd34WpPjhzlFPTzcjh8EgPOSpHIyVLx9GEbPO8Xvbxe_4m1LhyW6ryLZd4bbxvgCwTWMWWUqqRs9XeF5WX9Pi986uyqgMnUoG3RixFrGHA5idQGxyyIlpW2u4POpW0J8pXSurALjNgdWluP9uavs1FQkDyoU0c9MQxG30tJlWcT1k4S0zj5ivTCZDwLPB2ZVk2ltLlz6unJ2h97kJJ399STJG38rd2gkaiKumOqfPhs6UL9s7kQzRLqE8FOhrJyaTNTU9ajC69y5GvN_8AFm8G_Z147tvNBHV-mHsrca3tGjXffZbCQPHOVkgq8QBgwEDEk1dkdc2geza9340r6k4LW-8JmsnoRPca8DETeoWfJOfQmaMdMCcEgHgHfP-xbtbRa5WGuQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cb3ed8a-af0a-4ee4-a574-46498fbf4021", "record_id": "flaws_cloudtrail:0000182:1cb3ed8a-af0a-4ee4-a574-46498fbf4021", "row_index": 182, "timestamp": "2019-08-21T13:35:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cb3ed8a-af0a-4ee4-a574-46498fbf4021", "eventTime": "2019-08-21T13:35:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e3e3ef-d1d6-4ccc-b766-6d4cef4b2fbe", "record_id": "flaws_cloudtrail:0000183:a2e3e3ef-d1d6-4ccc-b766-6d4cef4b2fbe", "row_index": 183, "timestamp": "2019-08-21T13:35:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e3e3ef-d1d6-4ccc-b766-6d4cef4b2fbe", "eventTime": "2019-08-21T13:35:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: OYc9QKudjuVLuOkiWcxMAEh8im73T8eALAAYS3pkYQQd7GNwXweBr03dtRltmm6NTt9mvYORof_lEgtLi3BUXan07-asyjGoLum3vQ0TQu-cNJNogaV1PXN2ZHDoLR6ZCOUANvbVScAmEp3HYh2kkELwIXU2SQmcvtt-FEjiHoT3F6hRFb24Z1aiAZVyFE0xj_buACgR_dsHlx92tMIAm0xA0Leyz4FG3yfeIPxCaqIlBOOeEypJtQUDYikl902R1CNexdnApmTROfYTaJGJ-4gd34WpPjhzlFPTzcjh8EgPOSpHIyVLx9GEbPO8Xvbxe_4m1LhyW6ryLZd4bbxvgCwTWMWWUqqRs9XeF5WX9Pi986uyqgMnUoG3RixFrGHA5idQGxyyIlpW2u4POpW0J8pXSurALjNgdWluP9uavs1FQkDyoU0c9MQxG30tJlWcT1k4S0zj5ivTCZDwLPB2ZVk2ltLlz6unJ2h97kJJ399STJG38rd2gkaiKumOqfPhs6UL9s7kQzRLqE8FOhrJyaTNTU9ajC69y5GvN_8AFm8G_Z147tvNBHV-mHsrca3tGjXffZbCQPHOVkgq8QBgwEDEk1dkdc2geza9340r6k4LW-8JmsnoRPca8DETeoWfJOfQmaMdMCcEgHgHfP-xbtbRa5WGuQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cb3ed8a-af0a-4ee4-a574-46498fbf4021", "record_id": "flaws_cloudtrail:0000184:1cb3ed8a-af0a-4ee4-a574-46498fbf4021", "row_index": 184, "timestamp": "2019-08-21T13:35:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cb3ed8a-af0a-4ee4-a574-46498fbf4021", "eventTime": "2019-08-21T13:35:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "587357b0a-c0ca-4b69-aac9-44bd652e69a2", "record_id": "flaws_cloudtrail:0000185:587357b0a-c0ca-4b69-aac9-44bd652e69a2", "row_index": 185, "timestamp": "2019-08-21T13:35:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "587357b0a-c0ca-4b69-aac9-44bd652e69a2", "eventTime": "2019-08-21T13:35:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zoXzJxF6Kt1tknbBskHs_yBDz4SelZnDOzbyHZzfYK3Wi05yCyVDCYV4S9OrBlKtt0kohYR8uqZbZkpeijstGtZce7D7dSBuJKXBy_7b3KuTAi1RLm3Oxb5tB0wBrAmlZ2IlyeYkTmAViZXhiwdrC6R3BvjfqlcQoVHMqkjSr34iS7kKwpE3sSB2k8n2AlzQzWs3ArkWyFzQWBlGAIUttCkHUTeo1HDZlitdrycPxeg6lK8rZBHT37_OHHWgwxRIB1-DDJBD7Y27sHfv-PRdjvWbteWh93w0t3BV8k0q3-i7KluOEJ8D7nXLL5MGlQqFPoPEFQ_xvS-VBV_Cq_2err13UYWQIzdYa5Fu8j-weQXYTcoMjvOa-TkcVKEGtryBeag1GRzykjnPoFepyno41FoHNvNhy7BfRtLof6iLTST4a4Z7GnGInELTWkWveGvNAEW2MkXMDrxENHYXqXFzY87Ifabl6A4aFABcoxVaycQaXXQFpJVxOVEQxzj3_U2aA0TgRfMb7I40j8cS6TzRk1PtWA-deRFQdQY7aiEuuGz7xBKIzF4nkuZoSs_UQTTrJfL7SMCMuYXAcwKUuOQQd4h3yk_YsT8NKOX_GyAJG564CS7u2RNBFxxsNQ4b_ESDdk9qxWGZ3kehnDs212ZgASk82tCBCjM", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "587357b0a-c0ca-4b69-aac9-44bd652e69a2", "record_id": "flaws_cloudtrail:0000186:587357b0a-c0ca-4b69-aac9-44bd652e69a2", "row_index": 186, "timestamp": "2019-08-21T13:35:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "587357b0a-c0ca-4b69-aac9-44bd652e69a2", "eventTime": "2019-08-21T13:35:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: zoXzJxF6Kt1tknbBskHs_yBDz4SelZnDOzbyHZzfYK3Wi05yCyVDCYV4S9OrBlKtt0kohYR8uqZbZkpeijstGtZce7D7dSBuJKXBy_7b3KuTAi1RLm3Oxb5tB0wBrAmlZ2IlyeYkTmAViZXhiwdrC6R3BvjfqlcQoVHMqkjSr34iS7kKwpE3sSB2k8n2AlzQzWs3ArkWyFzQWBlGAIUttCkHUTeo1HDZlitdrycPxeg6lK8rZBHT37_OHHWgwxRIB1-DDJBD7Y27sHfv-PRdjvWbteWh93w0t3BV8k0q3-i7KluOEJ8D7nXLL5MGlQqFPoPEFQ_xvS-VBV_Cq_2err13UYWQIzdYa5Fu8j-weQXYTcoMjvOa-TkcVKEGtryBeag1GRzykjnPoFepyno41FoHNvNhy7BfRtLof6iLTST4a4Z7GnGInELTWkWveGvNAEW2MkXMDrxENHYXqXFzY87Ifabl6A4aFABcoxVaycQaXXQFpJVxOVEQxzj3_U2aA0TgRfMb7I40j8cS6TzRk1PtWA-deRFQdQY7aiEuuGz7xBKIzF4nkuZoSs_UQTTrJfL7SMCMuYXAcwKUuOQQd4h3yk_YsT8NKOX_GyAJG564CS7u2RNBFxxsNQ4b_ESDdk9qxWGZ3kehnDs212ZgASk82tCBCjM", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00dc1f18-520d-443e-ba4c-9f554338bb9a", "record_id": "flaws_cloudtrail:0000187:00dc1f18-520d-443e-ba4c-9f554338bb9a", "row_index": 187, "timestamp": "2019-08-21T13:35:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00dc1f18-520d-443e-ba4c-9f554338bb9a", "eventTime": "2019-08-21T13:35:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00dc1f18-520d-443e-ba4c-9f554338bb9a", "record_id": "flaws_cloudtrail:0000188:00dc1f18-520d-443e-ba4c-9f554338bb9a", "row_index": 188, "timestamp": "2019-08-21T13:35:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00dc1f18-520d-443e-ba4c-9f554338bb9a", "eventTime": "2019-08-21T13:35:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeeb4b7a-08cb-469c-905c-e1e50f02b8f1", "record_id": "flaws_cloudtrail:0000189:eeeb4b7a-08cb-469c-905c-e1e50f02b8f1", "row_index": 189, "timestamp": "2019-08-21T13:35:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeeb4b7a-08cb-469c-905c-e1e50f02b8f1", "eventTime": "2019-08-21T13:35:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eeeb4b7a-08cb-469c-905c-e1e50f02b8f1", "record_id": "flaws_cloudtrail:0000190:eeeb4b7a-08cb-469c-905c-e1e50f02b8f1", "row_index": 190, "timestamp": "2019-08-21T13:35:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eeeb4b7a-08cb-469c-905c-e1e50f02b8f1", "eventTime": "2019-08-21T13:35:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8ccc3fb-a616-4b6a-bb1a-2d60334daf11", "record_id": "flaws_cloudtrail:0000191:d8ccc3fb-a616-4b6a-bb1a-2d60334daf11", "row_index": 191, "timestamp": "2019-08-21T13:35:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1198, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8ccc3fb-a616-4b6a-bb1a-2d60334daf11", "eventTime": "2019-08-21T13:35:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8ccc3fb-a616-4b6a-bb1a-2d60334daf11", "record_id": "flaws_cloudtrail:0000192:d8ccc3fb-a616-4b6a-bb1a-2d60334daf11", "row_index": 192, "timestamp": "2019-08-21T13:35:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1198, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8ccc3fb-a616-4b6a-bb1a-2d60334daf11", "eventTime": "2019-08-21T13:35:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5f0f87-d13a-4322-8880-5ffc1bfa4466", "record_id": "flaws_cloudtrail:0000193:dc5f0f87-d13a-4322-8880-5ffc1bfa4466", "row_index": 193, "timestamp": "2019-08-21T13:35:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1199, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5f0f87-d13a-4322-8880-5ffc1bfa4466", "eventTime": "2019-08-21T13:35:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc5f0f87-d13a-4322-8880-5ffc1bfa4466", "record_id": "flaws_cloudtrail:0000194:dc5f0f87-d13a-4322-8880-5ffc1bfa4466", "row_index": 194, "timestamp": "2019-08-21T13:35:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1199, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc5f0f87-d13a-4322-8880-5ffc1bfa4466", "eventTime": "2019-08-21T13:35:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37234ae-09e5-4a22-860b-982147573d18", "record_id": "flaws_cloudtrail:0000195:37234ae-09e5-4a22-860b-982147573d18", "row_index": 195, "timestamp": "2019-08-21T13:35:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37234ae-09e5-4a22-860b-982147573d18", "eventTime": "2019-08-21T13:35:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HsHJbxRDF47__pMkd0sWZVh1AEqPJQYgZ7ykEzhpvqglWknuBbrnSLRX3F97qPj0JniEZCK_JZOAC7D_MvXI7qnIP6Bghhatccj0G9Rah_7FIE0s4GnfdJ5G2r2oGKl1pykXJmRIEyQNa2asU2tJMSt9g09M2nlhP4GqYcr9CcxyyfDEA4IOR91DxIeC4JStUCOCbYLzoIDc8yeP4gHzeXisb2V4gRZTa8N7mWnL7FJ7tkgvwgFql-w1ekUpBxcP0u-CNn3ExKbc_1httDcez2tAYoLzljajYKKR_S54MvikmYrw6MJ1lqIEXwfq-rGSPSLh8-dLLnGT-1R5_4rb8PSrH8ucSKO0MxYmtdtrMQNTX3He-8O8fUVdokOVNiYmPIh6ivQtsbR99Fz52nDj9ActEiZsqCzER7hny5hxcidPhdYhDEJkRtNSuWd5GvN0ahROw31rKV0jlORk-PR5ke_bUvroRk9V1ysc7r0N7d9yNSqscLjWMUC_Dgpc3CnOP8xatOgzeZVu1MEWWIYSa8xzMFGk80385-L0sP8Mq8OYJ0tHA_FN3yhe3HwUsPdqjoyqSXn2F77b67Wg7NHonFqZ_R7p8FIM-k4AsL6N6fEjHszb0SR-2ffmzLYp2oVIBJ4gEqeSRQUHFaivojqJHBHxn_2xTQE", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a2fb3f1-e7f3-4b7a-8e92-76a598884a36e", "record_id": "flaws_cloudtrail:0000196:0a2fb3f1-e7f3-4b7a-8e92-76a598884a36e", "row_index": 196, "timestamp": "2019-08-21T13:35:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a2fb3f1-e7f3-4b7a-8e92-76a598884a36e", "eventTime": "2019-08-21T13:35:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37234ae-09e5-4a22-860b-982147573d18", "record_id": "flaws_cloudtrail:0000197:37234ae-09e5-4a22-860b-982147573d18", "row_index": 197, "timestamp": "2019-08-21T13:35:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37234ae-09e5-4a22-860b-982147573d18", "eventTime": "2019-08-21T13:35:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HsHJbxRDF47__pMkd0sWZVh1AEqPJQYgZ7ykEzhpvqglWknuBbrnSLRX3F97qPj0JniEZCK_JZOAC7D_MvXI7qnIP6Bghhatccj0G9Rah_7FIE0s4GnfdJ5G2r2oGKl1pykXJmRIEyQNa2asU2tJMSt9g09M2nlhP4GqYcr9CcxyyfDEA4IOR91DxIeC4JStUCOCbYLzoIDc8yeP4gHzeXisb2V4gRZTa8N7mWnL7FJ7tkgvwgFql-w1ekUpBxcP0u-CNn3ExKbc_1httDcez2tAYoLzljajYKKR_S54MvikmYrw6MJ1lqIEXwfq-rGSPSLh8-dLLnGT-1R5_4rb8PSrH8ucSKO0MxYmtdtrMQNTX3He-8O8fUVdokOVNiYmPIh6ivQtsbR99Fz52nDj9ActEiZsqCzER7hny5hxcidPhdYhDEJkRtNSuWd5GvN0ahROw31rKV0jlORk-PR5ke_bUvroRk9V1ysc7r0N7d9yNSqscLjWMUC_Dgpc3CnOP8xatOgzeZVu1MEWWIYSa8xzMFGk80385-L0sP8Mq8OYJ0tHA_FN3yhe3HwUsPdqjoyqSXn2F77b67Wg7NHonFqZ_R7p8FIM-k4AsL6N6fEjHszb0SR-2ffmzLYp2oVIBJ4gEqeSRQUHFaivojqJHBHxn_2xTQE", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a2fb3f1-e7f3-4b7a-8e92-76a598884a36e", "record_id": "flaws_cloudtrail:0000198:0a2fb3f1-e7f3-4b7a-8e92-76a598884a36e", "row_index": 198, "timestamp": "2019-08-21T13:35:38Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a2fb3f1-e7f3-4b7a-8e92-76a598884a36e", "eventTime": "2019-08-21T13:35:38Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cde9849-c5dd-426d-9d29-d5c0f674315", "record_id": "flaws_cloudtrail:0000199:1cde9849-c5dd-426d-9d29-d5c0f674315", "row_index": 199, "timestamp": "2019-08-21T13:35:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cde9849-c5dd-426d-9d29-d5c0f674315", "eventTime": "2019-08-21T13:35:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cde9849-c5dd-426d-9d29-d5c0f674315", "record_id": "flaws_cloudtrail:0000200:1cde9849-c5dd-426d-9d29-d5c0f674315", "row_index": 200, "timestamp": "2019-08-21T13:35:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cde9849-c5dd-426d-9d29-d5c0f674315", "eventTime": "2019-08-21T13:35:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27ed9034-1e83-4db9-bf8c-5cccfe87efaa", "record_id": "flaws_cloudtrail:0000201:27ed9034-1e83-4db9-bf8c-5cccfe87efaa", "row_index": 201, "timestamp": "2019-08-21T13:35:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1940, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27ed9034-1e83-4db9-bf8c-5cccfe87efaa", "eventTime": "2019-08-21T13:35:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GhGxteFV33At9MneP7ai9gb0_1x7CpRdRCrpUpVZ7zUHf4rcpdwDCTgNoZphQ8447qUkEPeFWJT4NG2R-qPjE6YwBjpq1AUorAyu_zeOox9HBUQKi-aFUSw-nNBp3I-8bEQboup9jTlw49R2Y6k_wedeDLNXtq5dNlDHdFvwElFOtGv3BCzTf0rXblrGyO8tA1hq-tXDaRA24SJuUCORCr7SPz9kBSnhLaKnbm9BdUf74r1SXhqE8m1Loqt4reqAxeCPcO-mq5UOY8IfNpFqVZQEH8whUsLOBL_KNHa3P1CEpsd7w3sJQzIyIk6Lzp3JVdTEYUBUfBqwvG9D4SMQaEb4MdWDFRQPq5qNzpuzcz4QCkX4zLlVo4meQWBBBkMaULgxtMi6gkTDmq-Otp8Ebnng1R0RuwjMQSALGiQ4EdWYOgL5ddNRzArOGRQb9LjT3rA4XUeamT6mOn1_nK23SiyDRiFM6g9nsg4L9JPPqVFo_Q1oEwXwUCguFXh1QCAwviMRbTIiVow1orhgRwET8xy2q5Ps2wCSHHQjuRWBvvblwfGtowzUK961HIgo1h-NOMxU8HqNjL18_z3HyfGh5Vg6tpa1ote1e5zhzacxwqnYqLxMHsqy4A6VrB0EawoZnjNxUObVu0MtyDLcbo34HHDC_C2Fe18", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27ed9034-1e83-4db9-bf8c-5cccfe87efaa", "record_id": "flaws_cloudtrail:0000202:27ed9034-1e83-4db9-bf8c-5cccfe87efaa", "row_index": 202, "timestamp": "2019-08-21T13:35:42Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1940, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27ed9034-1e83-4db9-bf8c-5cccfe87efaa", "eventTime": "2019-08-21T13:35:42Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GhGxteFV33At9MneP7ai9gb0_1x7CpRdRCrpUpVZ7zUHf4rcpdwDCTgNoZphQ8447qUkEPeFWJT4NG2R-qPjE6YwBjpq1AUorAyu_zeOox9HBUQKi-aFUSw-nNBp3I-8bEQboup9jTlw49R2Y6k_wedeDLNXtq5dNlDHdFvwElFOtGv3BCzTf0rXblrGyO8tA1hq-tXDaRA24SJuUCORCr7SPz9kBSnhLaKnbm9BdUf74r1SXhqE8m1Loqt4reqAxeCPcO-mq5UOY8IfNpFqVZQEH8whUsLOBL_KNHa3P1CEpsd7w3sJQzIyIk6Lzp3JVdTEYUBUfBqwvG9D4SMQaEb4MdWDFRQPq5qNzpuzcz4QCkX4zLlVo4meQWBBBkMaULgxtMi6gkTDmq-Otp8Ebnng1R0RuwjMQSALGiQ4EdWYOgL5ddNRzArOGRQb9LjT3rA4XUeamT6mOn1_nK23SiyDRiFM6g9nsg4L9JPPqVFo_Q1oEwXwUCguFXh1QCAwviMRbTIiVow1orhgRwET8xy2q5Ps2wCSHHQjuRWBvvblwfGtowzUK961HIgo1h-NOMxU8HqNjL18_z3HyfGh5Vg6tpa1ote1e5zhzacxwqnYqLxMHsqy4A6VrB0EawoZnjNxUObVu0MtyDLcbo34HHDC_C2Fe18", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18a548f7-6fe5-4b7e-862e-b7c3e72703d5", "record_id": "flaws_cloudtrail:0000203:18a548f7-6fe5-4b7e-862e-b7c3e72703d5", "row_index": 203, "timestamp": "2019-08-21T13:35:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18a548f7-6fe5-4b7e-862e-b7c3e72703d5", "eventTime": "2019-08-21T13:35:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18a548f7-6fe5-4b7e-862e-b7c3e72703d5", "record_id": "flaws_cloudtrail:0000204:18a548f7-6fe5-4b7e-862e-b7c3e72703d5", "row_index": 204, "timestamp": "2019-08-21T13:35:43Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18a548f7-6fe5-4b7e-862e-b7c3e72703d5", "eventTime": "2019-08-21T13:35:43Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83185bc0-e55d-4477-8467-ad087a6f0a64", "record_id": "flaws_cloudtrail:0000205:83185bc0-e55d-4477-8467-ad087a6f0a64", "row_index": 205, "timestamp": "2019-08-21T13:35:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3428"], "raw_record_size_bytes": 613, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83185bc0-e55d-4477-8467-ad087a6f0a64", "eventTime": "2019-08-21T13:35:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3428"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3428"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605d2824-e1f9-41c1-9219-0ad901936f411", "record_id": "flaws_cloudtrail:0000206:605d2824-e1f9-41c1-9219-0ad901936f411", "row_index": 206, "timestamp": "2019-08-21T13:35:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1940, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605d2824-e1f9-41c1-9219-0ad901936f411", "eventTime": "2019-08-21T13:35:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WJvD9AWjThpfMLxHQxWXh5C7UQ3vXoN-wqohs7YCb84FxM7NcitFJkT5YKp6i5G04LTXY9zrQGW5Q8QWFDk3jm8ka96q9V2Wdr1r46W7pBGkLPKc9x6EskXYH7XveSHd1VVNp53QjAFWo4t-KR2lTH6GHdQ_dBGdSoLAz-yyas9WDuhI49SdbXvBLT3jw_0hMV2ooBlCi9hQ0J4gJsQx37L6AeKJ9Iw-jRaTueMe1SVJJhgKUwOCxY2W7OE7eEdhHyEFuYX6zfeD-L1D19iI3VHJ3RTnTEUWro1oUmSDfesyrqvfp2Rn5LCSu6Z3ZucDDKoBqzMmmDUMoi4zVqz_wZ5QVLxrMKH_m-qZZXFsB3sLC-7N2YAkdJCd9GILBllfj4zgqdZPzAtZRIan32OVgTHYuzguC5dYNvgTiDLzLToK6kzJxuELQy2bh_X3BO15DFCoahMgOEtMr_Ayg6A6sEscfFsluLVatJvyuPsRCutheD-6eZ_io-_NX2JgcWHeiZjnfxkj-roPvDrWl_OdntT-Nn9S7QDfCHlek3_FuDrUKBuOhWEUnE-j1uOcp7qyDKohiLM9VaHB_XHX8bMWuhdwS0yVY6aNTTyaf7UD1UtdnGgJo4lk54uuDHPN6zAMz2bBTzkjDyy6slBPJrAyztGhW7F6R37b", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "985bc2c9-8505-4c65-990c-8c5e3eb5a5cc", "record_id": "flaws_cloudtrail:0000207:985bc2c9-8505-4c65-990c-8c5e3eb5a5cc", "row_index": 207, "timestamp": "2019-08-21T13:35:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "985bc2c9-8505-4c65-990c-8c5e3eb5a5cc", "eventTime": "2019-08-21T13:35:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "605d2824-e1f9-41c1-9219-0ad901936f411", "record_id": "flaws_cloudtrail:0000208:605d2824-e1f9-41c1-9219-0ad901936f411", "row_index": 208, "timestamp": "2019-08-21T13:35:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1940, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "605d2824-e1f9-41c1-9219-0ad901936f411", "eventTime": "2019-08-21T13:35:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: WJvD9AWjThpfMLxHQxWXh5C7UQ3vXoN-wqohs7YCb84FxM7NcitFJkT5YKp6i5G04LTXY9zrQGW5Q8QWFDk3jm8ka96q9V2Wdr1r46W7pBGkLPKc9x6EskXYH7XveSHd1VVNp53QjAFWo4t-KR2lTH6GHdQ_dBGdSoLAz-yyas9WDuhI49SdbXvBLT3jw_0hMV2ooBlCi9hQ0J4gJsQx37L6AeKJ9Iw-jRaTueMe1SVJJhgKUwOCxY2W7OE7eEdhHyEFuYX6zfeD-L1D19iI3VHJ3RTnTEUWro1oUmSDfesyrqvfp2Rn5LCSu6Z3ZucDDKoBqzMmmDUMoi4zVqz_wZ5QVLxrMKH_m-qZZXFsB3sLC-7N2YAkdJCd9GILBllfj4zgqdZPzAtZRIan32OVgTHYuzguC5dYNvgTiDLzLToK6kzJxuELQy2bh_X3BO15DFCoahMgOEtMr_Ayg6A6sEscfFsluLVatJvyuPsRCutheD-6eZ_io-_NX2JgcWHeiZjnfxkj-roPvDrWl_OdntT-Nn9S7QDfCHlek3_FuDrUKBuOhWEUnE-j1uOcp7qyDKohiLM9VaHB_XHX8bMWuhdwS0yVY6aNTTyaf7UD1UtdnGgJo4lk54uuDHPN6zAMz2bBTzkjDyy6slBPJrAyztGhW7F6R37b", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "985bc2c9-8505-4c65-990c-8c5e3eb5a5cc", "record_id": "flaws_cloudtrail:0000209:985bc2c9-8505-4c65-990c-8c5e3eb5a5cc", "row_index": 209, "timestamp": "2019-08-21T13:35:46Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "985bc2c9-8505-4c65-990c-8c5e3eb5a5cc", "eventTime": "2019-08-21T13:35:46Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95fd7b4f-9202-4259-875e-660ac96b66ff", "record_id": "flaws_cloudtrail:0000210:95fd7b4f-9202-4259-875e-660ac96b66ff", "row_index": 210, "timestamp": "2019-08-21T13:35:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95fd7b4f-9202-4259-875e-660ac96b66ff", "eventTime": "2019-08-21T13:35:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95fd7b4f-9202-4259-875e-660ac96b66ff", "record_id": "flaws_cloudtrail:0000211:95fd7b4f-9202-4259-875e-660ac96b66ff", "row_index": 211, "timestamp": "2019-08-21T13:35:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95fd7b4f-9202-4259-875e-660ac96b66ff", "eventTime": "2019-08-21T13:35:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa404db7-7d01-4a78-afd3-aa59a4fdb726", "record_id": "flaws_cloudtrail:0000212:fa404db7-7d01-4a78-afd3-aa59a4fdb726", "row_index": 212, "timestamp": "2019-08-21T13:35:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa404db7-7d01-4a78-afd3-aa59a4fdb726", "eventTime": "2019-08-21T13:35:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: z0GaqiYfUTpEv-SZzy5_Rw2K6sObLDoSpJfnooVzosghwKso9AEtGwve2qhq3YtmUp5hCYz-1oRCy1GkD_cQDIhc28kagDoFQrp-KHJKQJnoG1aP7yykRg5hqsbE6qHVTgv-m9ttjVBSGe3p0nbR5PKw1RcfmGAruJK_zU3bcWvlJsheq0TfrFCXeHb_9t1hwwWEhVC9hevC9zk-pd7UKFumm0ZFDvceY0wYxDXEqjpcbTT1KJP1RVyKFYCvZDpnnCpb9vLtYSSMXYEjjmtobs6kn8yfKgFqJt7PjzgYSZIyYrbhEiazg-z9YfKdND7Uy5RFZMTDGUVZuRcoRw5dxBsmgvrzab80dX-zuzhD8aanWJTKeLCVIa9Xzmd_r_Z3kWOctbdyriSInUpI7Pry2VkW2woqrHL1NDRthRMdFVShTjtWpYFLrNKBLINRq3gR2s0-m9_YZiIPoJZu21u8bG3-il9295cq6JEp9M_lJShQXe_RVVw_xO34ttAXvronzdHihz8uLm04ZYdcScb6uuY35wBSv-Lm7oCSeUOWBOnQNWycvSXhs0QU1cVB3975zEDoY95shpfNcx_Dh0cb3hNghms2OBJgfyXClIpbnSUjpi6v8TDKYtGO1xEtFe8AF_wkpWdGMtHTzIDohr5NTJQaVrESTA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa404db7-7d01-4a78-afd3-aa59a4fdb726", "record_id": "flaws_cloudtrail:0000213:fa404db7-7d01-4a78-afd3-aa59a4fdb726", "row_index": 213, "timestamp": "2019-08-21T13:35:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa404db7-7d01-4a78-afd3-aa59a4fdb726", "eventTime": "2019-08-21T13:35:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: z0GaqiYfUTpEv-SZzy5_Rw2K6sObLDoSpJfnooVzosghwKso9AEtGwve2qhq3YtmUp5hCYz-1oRCy1GkD_cQDIhc28kagDoFQrp-KHJKQJnoG1aP7yykRg5hqsbE6qHVTgv-m9ttjVBSGe3p0nbR5PKw1RcfmGAruJK_zU3bcWvlJsheq0TfrFCXeHb_9t1hwwWEhVC9hevC9zk-pd7UKFumm0ZFDvceY0wYxDXEqjpcbTT1KJP1RVyKFYCvZDpnnCpb9vLtYSSMXYEjjmtobs6kn8yfKgFqJt7PjzgYSZIyYrbhEiazg-z9YfKdND7Uy5RFZMTDGUVZuRcoRw5dxBsmgvrzab80dX-zuzhD8aanWJTKeLCVIa9Xzmd_r_Z3kWOctbdyriSInUpI7Pry2VkW2woqrHL1NDRthRMdFVShTjtWpYFLrNKBLINRq3gR2s0-m9_YZiIPoJZu21u8bG3-il9295cq6JEp9M_lJShQXe_RVVw_xO34ttAXvronzdHihz8uLm04ZYdcScb6uuY35wBSv-Lm7oCSeUOWBOnQNWycvSXhs0QU1cVB3975zEDoY95shpfNcx_Dh0cb3hNghms2OBJgfyXClIpbnSUjpi6v8TDKYtGO1xEtFe8AF_wkpWdGMtHTzIDohr5NTJQaVrESTA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4d0a26-3d91-4445-8889-9367dcec4f43", "record_id": "flaws_cloudtrail:0000214:bf4d0a26-3d91-4445-8889-9367dcec4f43", "row_index": 214, "timestamp": "2019-08-21T13:35:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4d0a26-3d91-4445-8889-9367dcec4f43", "eventTime": "2019-08-21T13:35:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf4d0a26-3d91-4445-8889-9367dcec4f43", "record_id": "flaws_cloudtrail:0000215:bf4d0a26-3d91-4445-8889-9367dcec4f43", "row_index": 215, "timestamp": "2019-08-21T13:35:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1200, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf4d0a26-3d91-4445-8889-9367dcec4f43", "eventTime": "2019-08-21T13:35:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9791fe-97d7-4c82-a300-457620fd", "record_id": "flaws_cloudtrail:0000216:ec9791fe-97d7-4c82-a300-457620fd", "row_index": 216, "timestamp": "2019-08-21T13:35:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9791fe-97d7-4c82-a300-457620fd", "eventTime": "2019-08-21T13:35:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9791fe-97d7-4c82-a300-457620fd", "record_id": "flaws_cloudtrail:0000217:ec9791fe-97d7-4c82-a300-457620fd", "row_index": 217, "timestamp": "2019-08-21T13:35:53Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1196, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9791fe-97d7-4c82-a300-457620fd", "eventTime": "2019-08-21T13:35:53Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f66f8bfc-d091-4ba6-b23d-77cb5c1e63e5", "record_id": "flaws_cloudtrail:0000218:f66f8bfc-d091-4ba6-b23d-77cb5c1e63e5", "row_index": 218, "timestamp": "2019-08-21T13:35:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f66f8bfc-d091-4ba6-b23d-77cb5c1e63e5", "eventTime": "2019-08-21T13:35:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f66f8bfc-d091-4ba6-b23d-77cb5c1e63e5", "record_id": "flaws_cloudtrail:0000219:f66f8bfc-d091-4ba6-b23d-77cb5c1e63e5", "row_index": 219, "timestamp": "2019-08-21T13:35:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f66f8bfc-d091-4ba6-b23d-77cb5c1e63e5", "eventTime": "2019-08-21T13:35:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0655e300-d1d6-4486-81d2-bcbf011f16f7", "record_id": "flaws_cloudtrail:0000220:0655e300-d1d6-4486-81d2-bcbf011f16f7", "row_index": 220, "timestamp": "2019-08-21T13:36:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0655e300-d1d6-4486-81d2-bcbf011f16f7", "eventTime": "2019-08-21T13:36:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: kTFsPe7Mdhww-q3aec_SWVdnKmWxaHGbibOcfTcJee5jO80ege-miqzEF_edXi4xRbbbQDf5OER6-6wD_evuEWqy1BGdyGC1_ElcGmKfGpKfg6MgPmb9cuauDavx-D_0GF5k2TuHZUWJLwwAc68-VKn89KA3-ZOIEzzMD4H9FIg4SbgP4D8ILq7JpR_LvOKV6k6aech90TMCNxBgA5joJYEDT2xhsgGW34qJ-BbWXiqS3EszO5WFVtECJKXEGQ-ZNtmoDvz3BkUB4PLNSD8Zuz11G7Lw8rN-bNlRAbn8j1nPiYGFr5ztDffT5wntsYIbJE9xv1LtgHQ_-HNGPZTvU3VlUK9OryrLC5Q5G9IaA2TBXh8ptP1iGWvHsTsZ8aOuE7LF6CzUtveXGqoHZdFj2W0z-zrXiJSW3BE0j5S1D5RM6HFpEHLCwUJBQn_aSj4za40zIbLWDXE1-EHIOVoqpTlVMMoO1_S8MPmVd-JAVixjFSj9RpsLy075RgHeLlDdw7gF-KAhP3mT4HsISsC7zCgqN1ntUCApLpsQz65ptUlGzWWTHVFA1KFs5Ko4oXHM6mag-NeYi9_nZ810NvcDbJfX1g8eeLoM3LnWu5ylEmQlqAk0VYOwZnYdwyMAbbCJz6dPYVgGRON8sfln0mJlw2hR3y7v6lY", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0655e300-d1d6-4486-81d2-bcbf011f16f7", "record_id": "flaws_cloudtrail:0000221:0655e300-d1d6-4486-81d2-bcbf011f16f7", "row_index": 221, "timestamp": "2019-08-21T13:36:01Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0655e300-d1d6-4486-81d2-bcbf011f16f7", "eventTime": "2019-08-21T13:36:01Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: kTFsPe7Mdhww-q3aec_SWVdnKmWxaHGbibOcfTcJee5jO80ege-miqzEF_edXi4xRbbbQDf5OER6-6wD_evuEWqy1BGdyGC1_ElcGmKfGpKfg6MgPmb9cuauDavx-D_0GF5k2TuHZUWJLwwAc68-VKn89KA3-ZOIEzzMD4H9FIg4SbgP4D8ILq7JpR_LvOKV6k6aech90TMCNxBgA5joJYEDT2xhsgGW34qJ-BbWXiqS3EszO5WFVtECJKXEGQ-ZNtmoDvz3BkUB4PLNSD8Zuz11G7Lw8rN-bNlRAbn8j1nPiYGFr5ztDffT5wntsYIbJE9xv1LtgHQ_-HNGPZTvU3VlUK9OryrLC5Q5G9IaA2TBXh8ptP1iGWvHsTsZ8aOuE7LF6CzUtveXGqoHZdFj2W0z-zrXiJSW3BE0j5S1D5RM6HFpEHLCwUJBQn_aSj4za40zIbLWDXE1-EHIOVoqpTlVMMoO1_S8MPmVd-JAVixjFSj9RpsLy075RgHeLlDdw7gF-KAhP3mT4HsISsC7zCgqN1ntUCApLpsQz65ptUlGzWWTHVFA1KFs5Ko4oXHM6mag-NeYi9_nZ810NvcDbJfX1g8eeLoM3LnWu5ylEmQlqAk0VYOwZnYdwyMAbbCJz6dPYVgGRON8sfln0mJlw2hR3y7v6lY", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123eef52-7aba-49bf-a534-d19e9f250623", "record_id": "flaws_cloudtrail:0000222:123eef52-7aba-49bf-a534-d19e9f250623", "row_index": 222, "timestamp": "2019-08-21T13:36:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123eef52-7aba-49bf-a534-d19e9f250623", "eventTime": "2019-08-21T13:36:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "123eef52-7aba-49bf-a534-d19e9f250623", "record_id": "flaws_cloudtrail:0000223:123eef52-7aba-49bf-a534-d19e9f250623", "row_index": 223, "timestamp": "2019-08-21T13:36:02Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1201, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "123eef52-7aba-49bf-a534-d19e9f250623", "eventTime": "2019-08-21T13:36:02Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c179add-4917-4f18-9843-38ee044c13e1", "record_id": "flaws_cloudtrail:0000224:6c179add-4917-4f18-9843-38ee044c13e1", "row_index": 224, "timestamp": "2019-08-21T13:36:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c179add-4917-4f18-9843-38ee044c13e1", "eventTime": "2019-08-21T13:36:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rihcdYwDGDPVlQh6qFfmkndp9P5eDZYb7nljKMD65iFhzQDoCUhozMn9qORS_jtFq7HsxID4RdjDQq2QU-lTPXv8RLibYBexUzyRCJKNFm8NA3ZFQqjductUpxL9OLM98TLgvC2MQEqE2qionj9HMjbOkZRLa4SLLbHLPM_0ZxEdYAgdnfQtnxGWrBo-9bNzd9c6X1XDiETqYYb0RRVds88iDks_gcC1UX3BR6ZVNf460AibamXFNNI-necmqLCq3_8xA-J-lB1mIxK3VRUKEz2nqTWD8NpwQpCdCpvik_LSIsYcm5hkvoFoCkWDO6Xk4VfPu45z7WxaDUa-uGLe3soaxsAwUC8av_yYOI8zyGrVfhucRCvSfUZ48eOlkGiwo4e5bfgUqbZZZivCRTuNVXw8Lw19lxnOF489TryTq05HDxksgEonWTYsn4A0TtI3cVFqZpbBqXvxBsczfrpU8xmLkBJEZZ8oZuxqkYE7L7T1x0lmFlvkTkUURA4Sh-EVVGiIzJaxPThxuLoYqJF7MR5j4k4Ou6J1Vnew6jm0DfHqB0Y8K69N6X-0CeI6ihAXpdbM3CI9yHb_swa9LxX8mi8aEs1Gh5TfF5qL93M6_dxYUsPJTF8QJQFJkoTY_d8_LMp4sXtSu_xVJ5543GBzSrgBgxza", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c179add-4917-4f18-9843-38ee044c13e1", "record_id": "flaws_cloudtrail:0000225:6c179add-4917-4f18-9843-38ee044c13e1", "row_index": 225, "timestamp": "2019-08-21T13:36:40Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c179add-4917-4f18-9843-38ee044c13e1", "eventTime": "2019-08-21T13:36:40Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rihcdYwDGDPVlQh6qFfmkndp9P5eDZYb7nljKMD65iFhzQDoCUhozMn9qORS_jtFq7HsxID4RdjDQq2QU-lTPXv8RLibYBexUzyRCJKNFm8NA3ZFQqjductUpxL9OLM98TLgvC2MQEqE2qionj9HMjbOkZRLa4SLLbHLPM_0ZxEdYAgdnfQtnxGWrBo-9bNzd9c6X1XDiETqYYb0RRVds88iDks_gcC1UX3BR6ZVNf460AibamXFNNI-necmqLCq3_8xA-J-lB1mIxK3VRUKEz2nqTWD8NpwQpCdCpvik_LSIsYcm5hkvoFoCkWDO6Xk4VfPu45z7WxaDUa-uGLe3soaxsAwUC8av_yYOI8zyGrVfhucRCvSfUZ48eOlkGiwo4e5bfgUqbZZZivCRTuNVXw8Lw19lxnOF489TryTq05HDxksgEonWTYsn4A0TtI3cVFqZpbBqXvxBsczfrpU8xmLkBJEZZ8oZuxqkYE7L7T1x0lmFlvkTkUURA4Sh-EVVGiIzJaxPThxuLoYqJF7MR5j4k4Ou6J1Vnew6jm0DfHqB0Y8K69N6X-0CeI6ihAXpdbM3CI9yHb_swa9LxX8mi8aEs1Gh5TfF5qL93M6_dxYUsPJTF8QJQFJkoTY_d8_LMp4sXtSu_xVJ5543GBzSrgBgxza", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "129b5e68-7109-4c0d-9d91-767e21c4c27d", "record_id": "flaws_cloudtrail:0000226:129b5e68-7109-4c0d-9d91-767e21c4c27d", "row_index": 226, "timestamp": "2019-08-21T13:36:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "129b5e68-7109-4c0d-9d91-767e21c4c27d", "eventTime": "2019-08-21T13:36:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "129b5e68-7109-4c0d-9d91-767e21c4c27d", "record_id": "flaws_cloudtrail:0000227:129b5e68-7109-4c0d-9d91-767e21c4c27d", "row_index": 227, "timestamp": "2019-08-21T13:36:44Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "129b5e68-7109-4c0d-9d91-767e21c4c27d", "eventTime": "2019-08-21T13:36:44Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65b630f8-f9f2-4547-b432-4843fb80bcb0", "record_id": "flaws_cloudtrail:0000228:65b630f8-f9f2-4547-b432-4843fb80bcb0", "row_index": 228, "timestamp": "2019-08-21T13:36:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65b630f8-f9f2-4547-b432-4843fb80bcb0", "eventTime": "2019-08-21T13:36:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65b630f8-f9f2-4547-b432-4843fb80bcb0", "record_id": "flaws_cloudtrail:0000229:65b630f8-f9f2-4547-b432-4843fb80bcb0", "row_index": 229, "timestamp": "2019-08-21T13:36:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65b630f8-f9f2-4547-b432-4843fb80bcb0", "eventTime": "2019-08-21T13:36:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "h1.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de455780-e018-4378-b727-45a36d4cffef", "record_id": "flaws_cloudtrail:0000230:de455780-e018-4378-b727-45a36d4cffef", "row_index": 230, "timestamp": "2019-08-21T13:36:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3428-archive"], "raw_record_size_bytes": 629, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de455780-e018-4378-b727-45a36d4cffef", "eventTime": "2019-08-21T13:36:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3428-archive"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3428-archive"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51baedc9-101b-45f6-906d-92ec7f563eff", "record_id": "flaws_cloudtrail:0000231:51baedc9-101b-45f6-906d-92ec7f563eff", "row_index": 231, "timestamp": "2019-08-21T13:36:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51baedc9-101b-45f6-906d-92ec7f563eff", "eventTime": "2019-08-21T13:36:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IhqrQtTGnZMoTyOpNvdq2xS7AtTNCiCYr_WnsBU_MvJH6YjnuTsxGCFLcmDZ22XQowX9FLK-WWwf2xx0J4RyPh-pjavBHaIHJwcTKZYoCn3tO-jjEnmF8RD4yH4tYP3GGTUzFiO9itQ-rVanSEY2PInvYMjpAKQ_GG1omFAhghmSyerw-70dtwJQljuYD1FaeYk6cj7vxlMHMcD3vh7R198rX9o2y79pyNPYuRJgARbxDwiBfUB9sA06zAFPhK6sMt3uLp8Uv6vqgwHWpzp0quszuB_e41YuSe2VFeQleaZF-TYtMyps3KXiUphug-eBBU8RVhkpa1PlFQ0LN3TPFWOxS7fLN3T9jyN4qH8sNAYflQneG4Nmyfbi12blIG3GjW848cdXTsRi69DHDVzF5MelqJa_C1CZpozqxKM8oPseEVf6L473gODIdTrxhl1plpwL7Y6QoCBJQ6E-QwwN1WHT7zMgGMA8dnEfx_j5DgM2b7XfGjQU2MYv2YZAW-DM3ATUpjMqydJc4Rp2xzJtpQwOnj5XGmi2RHIwn4a09YwHCfXHy3qiJm5LzBApashei7ScE2FYoEnFUyKYJ8c2gbk6dSYLtSD73B8lQRqR4z2wlOokI_wymWkeqXiXpPT4paTKv9m5mcQxxlt62Q5DGH43AnAzZg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e352298b6-f945-4f84-8e61-4a63240b8", "record_id": "flaws_cloudtrail:0000232:e352298b6-f945-4f84-8e61-4a63240b8", "row_index": 232, "timestamp": "2019-08-21T13:36:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e352298b6-f945-4f84-8e61-4a63240b8", "eventTime": "2019-08-21T13:36:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51baedc9-101b-45f6-906d-92ec7f563eff", "record_id": "flaws_cloudtrail:0000233:51baedc9-101b-45f6-906d-92ec7f563eff", "row_index": 233, "timestamp": "2019-08-21T13:36:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51baedc9-101b-45f6-906d-92ec7f563eff", "eventTime": "2019-08-21T13:36:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IhqrQtTGnZMoTyOpNvdq2xS7AtTNCiCYr_WnsBU_MvJH6YjnuTsxGCFLcmDZ22XQowX9FLK-WWwf2xx0J4RyPh-pjavBHaIHJwcTKZYoCn3tO-jjEnmF8RD4yH4tYP3GGTUzFiO9itQ-rVanSEY2PInvYMjpAKQ_GG1omFAhghmSyerw-70dtwJQljuYD1FaeYk6cj7vxlMHMcD3vh7R198rX9o2y79pyNPYuRJgARbxDwiBfUB9sA06zAFPhK6sMt3uLp8Uv6vqgwHWpzp0quszuB_e41YuSe2VFeQleaZF-TYtMyps3KXiUphug-eBBU8RVhkpa1PlFQ0LN3TPFWOxS7fLN3T9jyN4qH8sNAYflQneG4Nmyfbi12blIG3GjW848cdXTsRi69DHDVzF5MelqJa_C1CZpozqxKM8oPseEVf6L473gODIdTrxhl1plpwL7Y6QoCBJQ6E-QwwN1WHT7zMgGMA8dnEfx_j5DgM2b7XfGjQU2MYv2YZAW-DM3ATUpjMqydJc4Rp2xzJtpQwOnj5XGmi2RHIwn4a09YwHCfXHy3qiJm5LzBApashei7ScE2FYoEnFUyKYJ8c2gbk6dSYLtSD73B8lQRqR4z2wlOokI_wymWkeqXiXpPT4paTKv9m5mcQxxlt62Q5DGH43AnAzZg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e352298b6-f945-4f84-8e61-4a63240b8", "record_id": "flaws_cloudtrail:0000234:e352298b6-f945-4f84-8e61-4a63240b8", "row_index": 234, "timestamp": "2019-08-21T13:36:49Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e352298b6-f945-4f84-8e61-4a63240b8", "eventTime": "2019-08-21T13:36:49Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adf80b20-045e-48ed-8bb6-c1ee138532b", "record_id": "flaws_cloudtrail:0000235:adf80b20-045e-48ed-8bb6-c1ee138532b", "row_index": 235, "timestamp": "2019-08-21T13:36:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adf80b20-045e-48ed-8bb6-c1ee138532b", "eventTime": "2019-08-21T13:36:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adf80b20-045e-48ed-8bb6-c1ee138532b", "record_id": "flaws_cloudtrail:0000236:adf80b20-045e-48ed-8bb6-c1ee138532b", "row_index": 236, "timestamp": "2019-08-21T13:36:50Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adf80b20-045e-48ed-8bb6-c1ee138532b", "eventTime": "2019-08-21T13:36:50Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "g2.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7195eedd-146b-4ba6-a74c-ff7148a527b6", "record_id": "flaws_cloudtrail:0000237:7195eedd-146b-4ba6-a74c-ff7148a527b6", "row_index": 237, "timestamp": "2019-08-21T13:36:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7195eedd-146b-4ba6-a74c-ff7148a527b6", "eventTime": "2019-08-21T13:36:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7195eedd-146b-4ba6-a74c-ff7148a527b6", "record_id": "flaws_cloudtrail:0000238:7195eedd-146b-4ba6-a74c-ff7148a527b6", "row_index": 238, "timestamp": "2019-08-21T13:36:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7195eedd-146b-4ba6-a74c-ff7148a527b6", "eventTime": "2019-08-21T13:36:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "512a341b-07ce-40f1-a3b3-142cffbb2a09", "record_id": "flaws_cloudtrail:0000239:512a341b-07ce-40f1-a3b3-142cffbb2a09", "row_index": 239, "timestamp": "2019-08-21T13:36:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "512a341b-07ce-40f1-a3b3-142cffbb2a09", "eventTime": "2019-08-21T13:36:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c3ceeaf-cc0a-42db-9c6e-7d1cdef5636a", "record_id": "flaws_cloudtrail:0000240:9c3ceeaf-cc0a-42db-9c6e-7d1cdef5636a", "row_index": 240, "timestamp": "2019-08-21T13:36:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1939, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c3ceeaf-cc0a-42db-9c6e-7d1cdef5636a", "eventTime": "2019-08-21T13:36:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mooLWsTozNZQEGebaAcNG4ulW1_nHliOyb9mnt_RSOXhO93uKcjhJ2eFI8WXQWQB1KAwgVW0sUvnYqnJIXYIGvUwQaXXA8e552YJH-4JeDOoqZyvZLLF_jZl5IgyGIGYj9v_EAVIKNGbGGqeBImOeRDI7FDjTfy9EJHcICCTwfS9Q5p2mbfkjm5-rx-LDcUwt5ti1muX-_ZO8UjuW1Q_hOUxwqJtGDcEjCZF5e4eM0RNgoxQCLlS2cX298504CXgn_-T88SYRSb2iystVytNJccE2rrO1cCPF-wf6w3lbCdjmS4N_Z00AuaB_FiDQf0fKJAJGWxs7mZYyEDj2StqoDtKz7tP53IUYuhgakoyCmoJIwesraxYb8GT3GvzuuOrfX49nFR_NgY0nC4nGQCAgNgt9cDvr0F4a41L-qARoPMdmQTrXlDMYXbWS5cOTek1BD5sbeQ2J3ApIwldfim9FJtLeBwl4QV6FZIvTd6xo64_6Glb-ZpODNKDtOAOZp7VrjGb_YkHvlVaZPkdmQXFvJXA8q40l5RiB_OePPX5bUjid3NQ68xDf7GBhwkuUO4hhX9tPWLqQ7_Mk9KiN-54amQ_r0v-svM8dGb328XRGYAOpjkY8G9k4l7z_NKj49AQ27f50sgiKyP0I5c_eHVCacxikKFI88gA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "512a341b-07ce-40f1-a3b3-142cffbb2a09", "record_id": "flaws_cloudtrail:0000241:512a341b-07ce-40f1-a3b3-142cffbb2a09", "row_index": 241, "timestamp": "2019-08-21T13:36:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1285, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "512a341b-07ce-40f1-a3b3-142cffbb2a09", "eventTime": "2019-08-21T13:36:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c3ceeaf-cc0a-42db-9c6e-7d1cdef5636a", "record_id": "flaws_cloudtrail:0000242:9c3ceeaf-cc0a-42db-9c6e-7d1cdef5636a", "row_index": 242, "timestamp": "2019-08-21T13:36:54Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1939, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c3ceeaf-cc0a-42db-9c6e-7d1cdef5636a", "eventTime": "2019-08-21T13:36:54Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: mooLWsTozNZQEGebaAcNG4ulW1_nHliOyb9mnt_RSOXhO93uKcjhJ2eFI8WXQWQB1KAwgVW0sUvnYqnJIXYIGvUwQaXXA8e552YJH-4JeDOoqZyvZLLF_jZl5IgyGIGYj9v_EAVIKNGbGGqeBImOeRDI7FDjTfy9EJHcICCTwfS9Q5p2mbfkjm5-rx-LDcUwt5ti1muX-_ZO8UjuW1Q_hOUxwqJtGDcEjCZF5e4eM0RNgoxQCLlS2cX298504CXgn_-T88SYRSb2iystVytNJccE2rrO1cCPF-wf6w3lbCdjmS4N_Z00AuaB_FiDQf0fKJAJGWxs7mZYyEDj2StqoDtKz7tP53IUYuhgakoyCmoJIwesraxYb8GT3GvzuuOrfX49nFR_NgY0nC4nGQCAgNgt9cDvr0F4a41L-qARoPMdmQTrXlDMYXbWS5cOTek1BD5sbeQ2J3ApIwldfim9FJtLeBwl4QV6FZIvTd6xo64_6Glb-ZpODNKDtOAOZp7VrjGb_YkHvlVaZPkdmQXFvJXA8q40l5RiB_OePPX5bUjid3NQ68xDf7GBhwkuUO4hhX9tPWLqQ7_Mk9KiN-54amQ_r0v-svM8dGb328XRGYAOpjkY8G9k4l7z_NKj49AQ27f50sgiKyP0I5c_eHVCacxikKFI88gA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p3.2xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ee8abda-9805-4681-8c7a-7589a3a0fe9c", "record_id": "flaws_cloudtrail:0000243:2ee8abda-9805-4681-8c7a-7589a3a0fe9c", "row_index": 243, "timestamp": "2019-08-21T13:36:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ee8abda-9805-4681-8c7a-7589a3a0fe9c", "eventTime": "2019-08-21T13:36:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 85BR-ilJLcsQMtB2jH1KER_vC-DrbRrluCIXrQ3RPqSigok-Yj_q7nzdrl6h5IAzswgGNU_gYdB1J-W7QHvTzaBDRL0hiL0uJmG449cqEDuryLDaS0Bss4bpDqflA7Y8xrPO_RTDfaAWWhdUhlYAhoXY9HVfMMi9L_weEqmshkuAe8Hvwf7RodwFtEe22oO4UDz-GVZYxVrAWxfruMZo8DwWgRFy4Ja5FpunPXXSO5ck6Ey2To_bLhz6Y28YnO6JxX3XwzhUt9CXBxp7YTIpkBEJKxb63-O9AX4qHwIOu9pE0habk18gtzsz6rfaTyyrboaKgB6yK6DBsc4GsFr-V-jkCjBNqiy-aLa9o9jvChL8QqDupPbdOK5QVsGCxUhMPp8KXK4VVMCjMt1AMVb4F6St-Ex7bs6hcOcLDa9OtFPsUEiI9CnHUgQQlyioYAy8dU5WUOUEXljQ9OZqt7cWK1uA6PCwKTu0vPhfFRe8ixbLSmlGQqjez9t5Gj_AwKX9ZAQ4VrdoMIv-XcKI-NvTgEtC_e9rz4FCbb1RGf29tlalVB7lqY5OanMeXo7D8L6XyL_cqammnzKLaGpY17MyLGugpfC4-7JVS0RquBv_dPOhfUovEixDJ6WoJ8otjOVULU7ye2yCudc3YYNMkxPpjdQHba_uWZs", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ee8abda-9805-4681-8c7a-7589a3a0fe9c", "record_id": "flaws_cloudtrail:0000244:2ee8abda-9805-4681-8c7a-7589a3a0fe9c", "row_index": 244, "timestamp": "2019-08-21T13:36:56Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ee8abda-9805-4681-8c7a-7589a3a0fe9c", "eventTime": "2019-08-21T13:36:56Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 85BR-ilJLcsQMtB2jH1KER_vC-DrbRrluCIXrQ3RPqSigok-Yj_q7nzdrl6h5IAzswgGNU_gYdB1J-W7QHvTzaBDRL0hiL0uJmG449cqEDuryLDaS0Bss4bpDqflA7Y8xrPO_RTDfaAWWhdUhlYAhoXY9HVfMMi9L_weEqmshkuAe8Hvwf7RodwFtEe22oO4UDz-GVZYxVrAWxfruMZo8DwWgRFy4Ja5FpunPXXSO5ck6Ey2To_bLhz6Y28YnO6JxX3XwzhUt9CXBxp7YTIpkBEJKxb63-O9AX4qHwIOu9pE0habk18gtzsz6rfaTyyrboaKgB6yK6DBsc4GsFr-V-jkCjBNqiy-aLa9o9jvChL8QqDupPbdOK5QVsGCxUhMPp8KXK4VVMCjMt1AMVb4F6St-Ex7bs6hcOcLDa9OtFPsUEiI9CnHUgQQlyioYAy8dU5WUOUEXljQ9OZqt7cWK1uA6PCwKTu0vPhfFRe8ixbLSmlGQqjez9t5Gj_AwKX9ZAQ4VrdoMIv-XcKI-NvTgEtC_e9rz4FCbb1RGf29tlalVB7lqY5OanMeXo7D8L6XyL_cqammnzKLaGpY17MyLGugpfC4-7JVS0RquBv_dPOhfUovEixDJ6WoJ8otjOVULU7ye2yCudc3YYNMkxPpjdQHba_uWZs", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30e7e323-a34d-4087-9779-2bdbc79de8af", "record_id": "flaws_cloudtrail:0000245:30e7e323-a34d-4087-9779-2bdbc79de8af", "row_index": 245, "timestamp": "2019-08-21T13:36:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30e7e323-a34d-4087-9779-2bdbc79de8af", "eventTime": "2019-08-21T13:36:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Zdzr67BApMDaV48TJlosVbhvpqUO9twckXUg97um8UJTLH-wpsAFR3RgPLwvEvrPq-UauSrR6OWMSLY_2_qrv9f6m9afmgPbZ5i3z0TKEU95hFpIIxdSdTBNmKXnfai8-NeU5be8qD_LZJS1eAZ1eyuLmLGUBcHAA5WTEYke3oLM5O2tnzTT21MrhU8-tzl6UyXbHHR2YVu05nwAO_IZkJO01o0ZIrXR2gV8_uT20nlzrewVySp-WUPv1kFvyiAYbWFeBh6VFTCsOuNxrPmZyDHHzFh65L9B3FSsrxryYflNDMf6l43AsSoQ1jsHQnHtMsDxFKmLDeP9DQ7by2OpY_vVI_OMwGu0Z6N799pSbfOpo7EYf3B-4uILvCUfLib8TlKU8ktFvInWvbVMOvm3-sKUU2oOO8W1mNwG6fJ91O-x7FWXykELN5Gm49E2bN3mQhxyQ9usVs7CT8vpvr-F8eUdp2ynRbR16yjL3IRBk1CRKM28YRoH9e7PHMS-xLJ_Cdk8OeWJklHlg3OG422osKXVv0S0yWVRGghnVdCmzLidg5btcXxGc9HrXCmMkNCJsoty83707CPQVGe0OjHSIJ-nbH01TvTfqs8Elsln_P3OEHlcA3wy_LC0iRfpMNfCoyZ2pbax3R8jN99ewRq2Xx_ch0qkeg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "201dca10-9c7d-43e6-861e-c584fe14b82a", "record_id": "flaws_cloudtrail:0000246:201dca10-9c7d-43e6-861e-c584fe14b82a", "row_index": 246, "timestamp": "2019-08-21T13:36:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1198, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "201dca10-9c7d-43e6-861e-c584fe14b82a", "eventTime": "2019-08-21T13:36:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30e7e323-a34d-4087-9779-2bdbc79de8af", "record_id": "flaws_cloudtrail:0000247:30e7e323-a34d-4087-9779-2bdbc79de8af", "row_index": 247, "timestamp": "2019-08-21T13:36:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30e7e323-a34d-4087-9779-2bdbc79de8af", "eventTime": "2019-08-21T13:36:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Zdzr67BApMDaV48TJlosVbhvpqUO9twckXUg97um8UJTLH-wpsAFR3RgPLwvEvrPq-UauSrR6OWMSLY_2_qrv9f6m9afmgPbZ5i3z0TKEU95hFpIIxdSdTBNmKXnfai8-NeU5be8qD_LZJS1eAZ1eyuLmLGUBcHAA5WTEYke3oLM5O2tnzTT21MrhU8-tzl6UyXbHHR2YVu05nwAO_IZkJO01o0ZIrXR2gV8_uT20nlzrewVySp-WUPv1kFvyiAYbWFeBh6VFTCsOuNxrPmZyDHHzFh65L9B3FSsrxryYflNDMf6l43AsSoQ1jsHQnHtMsDxFKmLDeP9DQ7by2OpY_vVI_OMwGu0Z6N799pSbfOpo7EYf3B-4uILvCUfLib8TlKU8ktFvInWvbVMOvm3-sKUU2oOO8W1mNwG6fJ91O-x7FWXykELN5Gm49E2bN3mQhxyQ9usVs7CT8vpvr-F8eUdp2ynRbR16yjL3IRBk1CRKM28YRoH9e7PHMS-xLJ_Cdk8OeWJklHlg3OG422osKXVv0S0yWVRGghnVdCmzLidg5btcXxGc9HrXCmMkNCJsoty83707CPQVGe0OjHSIJ-nbH01TvTfqs8Elsln_P3OEHlcA3wy_LC0iRfpMNfCoyZ2pbax3R8jN99ewRq2Xx_ch0qkeg", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "201dca10-9c7d-43e6-861e-c584fe14b82a", "record_id": "flaws_cloudtrail:0000248:201dca10-9c7d-43e6-861e-c584fe14b82a", "row_index": 248, "timestamp": "2019-08-21T13:36:57Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1198, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "201dca10-9c7d-43e6-861e-c584fe14b82a", "eventTime": "2019-08-21T13:36:57Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a149c20-c5be-412c-8296-abe62625f", "record_id": "flaws_cloudtrail:0000249:3a149c20-c5be-412c-8296-abe62625f", "row_index": 249, "timestamp": "2019-08-21T13:38:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a149c20-c5be-412c-8296-abe62625f", "eventTime": "2019-08-21T13:38:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Gu9JGPveyG8FAKW2b4Q_pxAB9jGbYkYhJlKSmDNi11SKWclHd5HUh9jIge1MwQmnXgbuZtVlks1oGo_UsfDlw_oZ_RdxOZcDLP7ii_WQT8x2yN3HmZnykGFBq-cUNNpqLnKhnaQDg--cuj0hvBtyjlwdWyukHm2IOoQHqgkMRblL-6EFlQQcvRj1ckxiDHmcHbZ6xddb3XBv7tF8XTvwRI9Lmf43gze3HFyPjjemv-6OVRFEr5oLBNdF75lAJGxR7o3g9sH208Uu4m4UpBRtd6GiJo5C543cClLaCFgBG_JoHNRr0S1qvr5xc3vKDZ5Gpv0rALDRJFnZYND74YiZQzg-sA8kl_9kL2W5igEE2gdweuYOcvvnl61dfcxFD_jgz-Iar1tFXbIB0tIZYW27GV-Hsyf-_YQersrJXvKchW_XyA_oaJiLn_zfg_9xLOx1Hvfye2aanVwVuS5X_SRj3nvacF25npwrGauK1yzc7kZibJ-T5FkFeeWlxIPRYrro5pKjTPeeSjZB9HxO2BoV1oNsQz9BjEjQOt-KsWZe7tN3U0748qxIgDEbHP-Xo9tLjetFt1plS2SogIw9955SLAFMRdWawxQM14tqdzJ0sx1n-QhxM72BbBrP2WgIbsZBCfEIBLQRsyt5_DwUtjWjlq4zc45lkA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a149c20-c5be-412c-8296-abe62625f", "record_id": "flaws_cloudtrail:0000250:3a149c20-c5be-412c-8296-abe62625f", "row_index": 250, "timestamp": "2019-08-21T13:38:07Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a149c20-c5be-412c-8296-abe62625f", "eventTime": "2019-08-21T13:38:07Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Gu9JGPveyG8FAKW2b4Q_pxAB9jGbYkYhJlKSmDNi11SKWclHd5HUh9jIge1MwQmnXgbuZtVlks1oGo_UsfDlw_oZ_RdxOZcDLP7ii_WQT8x2yN3HmZnykGFBq-cUNNpqLnKhnaQDg--cuj0hvBtyjlwdWyukHm2IOoQHqgkMRblL-6EFlQQcvRj1ckxiDHmcHbZ6xddb3XBv7tF8XTvwRI9Lmf43gze3HFyPjjemv-6OVRFEr5oLBNdF75lAJGxR7o3g9sH208Uu4m4UpBRtd6GiJo5C543cClLaCFgBG_JoHNRr0S1qvr5xc3vKDZ5Gpv0rALDRJFnZYND74YiZQzg-sA8kl_9kL2W5igEE2gdweuYOcvvnl61dfcxFD_jgz-Iar1tFXbIB0tIZYW27GV-Hsyf-_YQersrJXvKchW_XyA_oaJiLn_zfg_9xLOx1Hvfye2aanVwVuS5X_SRj3nvacF25npwrGauK1yzc7kZibJ-T5FkFeeWlxIPRYrro5pKjTPeeSjZB9HxO2BoV1oNsQz9BjEjQOt-KsWZe7tN3U0748qxIgDEbHP-Xo9tLjetFt1plS2SogIw9955SLAFMRdWawxQM14tqdzJ0sx1n-QhxM72BbBrP2WgIbsZBCfEIBLQRsyt5_DwUtjWjlq4zc45lkA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53bad596-3751-46ac-850d-93b0ee3583f4", "record_id": "flaws_cloudtrail:0000251:53bad596-3751-46ac-850d-93b0ee3583f4", "row_index": 251, "timestamp": "2019-08-21T13:38:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53bad596-3751-46ac-850d-93b0ee3583f4", "eventTime": "2019-08-21T13:38:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1fxa58ine9kvtK6nYYUbepW1SbEoCi1ft969KjJ-peny2ukUm_P1x4JVqUx1ApdShQWLA1kvGFON4qh7Wo9_jTDs5WNyKWMRmaD5cKbD4_NIYXxP1vCcSezIWIiX9lt28NZ-1s5mOiSM8hvtIXi86cdomCBtw8Fbbn4K17FgkWJX0CqoIBV5fSPnfJcpwJeJJGOpmbDMbnRMFdIMdPaXhduDmS47aOhVWr2xfYZZ7a01zPF3iL6KCZPIpp1c54hHHnwsxTyAKUn0rjX6vArw_C0i78JcdUGMRHzsdHKHgMMMWVgTZPxR83MN8kv1inGGC7evrVZf7w-BQXhoamBuOqJUh4PkjGHTrYKQDF4UoBbKCOyT1sC9AR-5p-ilvTQEA_x3SJFm5KnYWulMlozObgCosHJZSujsNxpGWJZWmC1Z8rDvrceH-TWPl9K6Lt0A4oNi4EgZ5UZCV_yMQjhePLD-vPurwY1KYI3GvvU5Dmi7h2STbx2SDgZ0OSyLoVLvQSmX7BknegGnU0ehj8eaHpZh_s-6EWW0hVmTDqKPO0SFnU94zx1WB6ATHRPsYLRVd1d9XGI7XmQg6iC5H11Iopc-4jeS5a-kUfXP8wqorpZfb5ZtkkD5TTmRJFO_RwilDcD73MwUj7vVXc3yGfUUC2gync7M3g", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53bad596-3751-46ac-850d-93b0ee3583f4", "record_id": "flaws_cloudtrail:0000252:53bad596-3751-46ac-850d-93b0ee3583f4", "row_index": 252, "timestamp": "2019-08-21T13:38:09Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1938, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53bad596-3751-46ac-850d-93b0ee3583f4", "eventTime": "2019-08-21T13:38:09Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1fxa58ine9kvtK6nYYUbepW1SbEoCi1ft969KjJ-peny2ukUm_P1x4JVqUx1ApdShQWLA1kvGFON4qh7Wo9_jTDs5WNyKWMRmaD5cKbD4_NIYXxP1vCcSezIWIiX9lt28NZ-1s5mOiSM8hvtIXi86cdomCBtw8Fbbn4K17FgkWJX0CqoIBV5fSPnfJcpwJeJJGOpmbDMbnRMFdIMdPaXhduDmS47aOhVWr2xfYZZ7a01zPF3iL6KCZPIpp1c54hHHnwsxTyAKUn0rjX6vArw_C0i78JcdUGMRHzsdHKHgMMMWVgTZPxR83MN8kv1inGGC7evrVZf7w-BQXhoamBuOqJUh4PkjGHTrYKQDF4UoBbKCOyT1sC9AR-5p-ilvTQEA_x3SJFm5KnYWulMlozObgCosHJZSujsNxpGWJZWmC1Z8rDvrceH-TWPl9K6Lt0A4oNi4EgZ5UZCV_yMQjhePLD-vPurwY1KYI3GvvU5Dmi7h2STbx2SDgZ0OSyLoVLvQSmX7BknegGnU0ehj8eaHpZh_s-6EWW0hVmTDqKPO0SFnU94zx1WB6ATHRPsYLRVd1d9XGI7XmQg6iC5H11Iopc-4jeS5a-kUfXP8wqorpZfb5ZtkkD5TTmRJFO_RwilDcD73MwUj7vVXc3yGfUUC2gync7M3g", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f696ebf-ad43-4913-8298-eb9ab0b4020a", "record_id": "flaws_cloudtrail:0000253:3f696ebf-ad43-4913-8298-eb9ab0b4020a", "row_index": 253, "timestamp": "2019-08-21T13:38:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f696ebf-ad43-4913-8298-eb9ab0b4020a", "eventTime": "2019-08-21T13:38:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bFQOrHnjMeWF5G6hELYzXH0qnvqoC-AXEIQNAFZ0szX2ZLReAXUpCh92ziHnYpqxYOEyP8uvrypHfjG5cvY1i91-w9PVm1beaqX24otDZJ7FOlHgeR5j6DUxdj7FwYBcXp5fOylhz6QZoHIM0UrvlJeDUDFvwHnh9uYy-sehbiLU5TBMSMxctDId_H4Cd1gzWzXEeLnfa4x9JOntGu8dszS-eITNnGWm6zxqIXu0R_YMIIjCfW_j_3YOYGknyLGJ4HHIwot4nA3OOfzmeNKIscyUetLu_aXH4TDmfxGnQwpua2dMim44f_5-fNSLR9xj6mP3qtQRiXWcu40kWWXV2TxFOQxfaNfeyx7eOFrEkSSc261OKTpUV9QW23RIgG07Xnt_91z38q1zbIRnRx0BCbE9JizgW5DVqIZCBVlQ37VbJ5DRdC7vcfbkfS-cBCqLy9x-lqmG2M-kKkL5cELSDQwm-i-nqegp6_Bqb2uDBm99a97Qi7yuRfg6lhRJVsXwdZQE35HxptG2_FYqM9S1C4CufxPOvDNAxV9Ke1porCMvL3eYKJvLn1NM8U_Oa1gIm-9CrnWq6hVXPi1H2ZORfxsvmRad11WFCJZtkFI7FOtxg6vS4GtJ0f3uUVqaJwMhBp0oDdAsrb4XUx7My6_jsZHEcs99", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f696ebf-ad43-4913-8298-eb9ab0b4020a", "record_id": "flaws_cloudtrail:0000254:3f696ebf-ad43-4913-8298-eb9ab0b4020a", "row_index": 254, "timestamp": "2019-08-21T13:38:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f696ebf-ad43-4913-8298-eb9ab0b4020a", "eventTime": "2019-08-21T13:38:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: bFQOrHnjMeWF5G6hELYzXH0qnvqoC-AXEIQNAFZ0szX2ZLReAXUpCh92ziHnYpqxYOEyP8uvrypHfjG5cvY1i91-w9PVm1beaqX24otDZJ7FOlHgeR5j6DUxdj7FwYBcXp5fOylhz6QZoHIM0UrvlJeDUDFvwHnh9uYy-sehbiLU5TBMSMxctDId_H4Cd1gzWzXEeLnfa4x9JOntGu8dszS-eITNnGWm6zxqIXu0R_YMIIjCfW_j_3YOYGknyLGJ4HHIwot4nA3OOfzmeNKIscyUetLu_aXH4TDmfxGnQwpua2dMim44f_5-fNSLR9xj6mP3qtQRiXWcu40kWWXV2TxFOQxfaNfeyx7eOFrEkSSc261OKTpUV9QW23RIgG07Xnt_91z38q1zbIRnRx0BCbE9JizgW5DVqIZCBVlQ37VbJ5DRdC7vcfbkfS-cBCqLy9x-lqmG2M-kKkL5cELSDQwm-i-nqegp6_Bqb2uDBm99a97Qi7yuRfg6lhRJVsXwdZQE35HxptG2_FYqM9S1C4CufxPOvDNAxV9Ke1porCMvL3eYKJvLn1NM8U_Oa1gIm-9CrnWq6hVXPi1H2ZORfxsvmRad11WFCJZtkFI7FOtxg6vS4GtJ0f3uUVqaJwMhBp0oDdAsrb4XUx7My6_jsZHEcs99", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "099138ebd-c810-40ac-9464-6e3a076546f2", "record_id": "flaws_cloudtrail:0000255:099138ebd-c810-40ac-9464-6e3a076546f2", "row_index": 255, "timestamp": "2019-08-21T13:38:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "099138ebd-c810-40ac-9464-6e3a076546f2", "eventTime": "2019-08-21T13:38:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZBsNlTmoD4_QEGMm-s6y2PJu2qIkHFsZpMLCCN1hR2UBnP4pRFE0-nNTaj9hxTa7PK8T7YSQorU3azfT_KTX8NGetnz7eDND58FKU5uaJJ03qLBemO7jh5vOVsVweVxBX9jLhUN0gjOhCf3oMrY0lrjlApKDn2_vEbV_o8qzmfgd30AScNz5XInpBRnXFXmcitsM91sL6pabgD43ZSKtHyo0k0v44bfArXLofYdew53eFHHVIKG7JAadwE-sL342fKL0D0yxKnJ5tBjEVi9pFlYhy9b99TsGXCdBSBKpKME0KcIzoeW-s5DBunTdUnCGFhXauM20iav_J_qYbtFeAkewFO6su_CYbiQGP-KjI1hyYciULQLxBodAniE7STAkRY53Y3oSZ7NfF7zs-RBjtseFgsg0uEfZfG9qzUt3r0KnotAnq6v0ehzi9mDsoAsJDmJi3h8BVb6kxO51PvGF0MxAu0XIYAVay-3cOhSLIXk3Kyi3UcAHbCWx-mzxJufgtDbBdV9SRzPbafhIZnAm6g1DOGQMDEu63Ew0pL5OC8mqEWV3iGvHPfLoc5cj7Bt5SOtTzUoaNSh6e7d5She5JiZjagFNHRzX7PImveFKhxnTzPEFAaykg-nqgU5REyRD1qicmcGNbb11j3nCXXeIobwRV5wX", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "099138ebd-c810-40ac-9464-6e3a076546f2", "record_id": "flaws_cloudtrail:0000256:099138ebd-c810-40ac-9464-6e3a076546f2", "row_index": 256, "timestamp": "2019-08-21T13:38:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "099138ebd-c810-40ac-9464-6e3a076546f2", "eventTime": "2019-08-21T13:38:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZBsNlTmoD4_QEGMm-s6y2PJu2qIkHFsZpMLCCN1hR2UBnP4pRFE0-nNTaj9hxTa7PK8T7YSQorU3azfT_KTX8NGetnz7eDND58FKU5uaJJ03qLBemO7jh5vOVsVweVxBX9jLhUN0gjOhCf3oMrY0lrjlApKDn2_vEbV_o8qzmfgd30AScNz5XInpBRnXFXmcitsM91sL6pabgD43ZSKtHyo0k0v44bfArXLofYdew53eFHHVIKG7JAadwE-sL342fKL0D0yxKnJ5tBjEVi9pFlYhy9b99TsGXCdBSBKpKME0KcIzoeW-s5DBunTdUnCGFhXauM20iav_J_qYbtFeAkewFO6su_CYbiQGP-KjI1hyYciULQLxBodAniE7STAkRY53Y3oSZ7NfF7zs-RBjtseFgsg0uEfZfG9qzUt3r0KnotAnq6v0ehzi9mDsoAsJDmJi3h8BVb6kxO51PvGF0MxAu0XIYAVay-3cOhSLIXk3Kyi3UcAHbCWx-mzxJufgtDbBdV9SRzPbafhIZnAm6g1DOGQMDEu63Ew0pL5OC8mqEWV3iGvHPfLoc5cj7Bt5SOtTzUoaNSh6e7d5She5JiZjagFNHRzX7PImveFKhxnTzPEFAaykg-nqgU5REyRD1qicmcGNbb11j3nCXXeIobwRV5wX", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7942499-29d2-43e5-809f-be7c0b9e8c6f", "record_id": "flaws_cloudtrail:0000257:c7942499-29d2-43e5-809f-be7c0b9e8c6f", "row_index": 257, "timestamp": "2019-08-21T13:38:18Z", "event_type": "ListObjects", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3428"], "raw_record_size_bytes": 633, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7942499-29d2-43e5-809f-be7c0b9e8c6f", "eventTime": "2019-08-21T13:38:18Z", "eventName": "ListObjects", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3428", "prefix": "customer/"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3428"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb044ca7-7425-4cb5-9ed8-ea993877ebb7", "record_id": "flaws_cloudtrail:0000258:fb044ca7-7425-4cb5-9ed8-ea993877ebb7", "row_index": 258, "timestamp": "2019-08-21T13:38:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb044ca7-7425-4cb5-9ed8-ea993877ebb7", "eventTime": "2019-08-21T13:38:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: lK5OCYDBYlzB11-jljjWih2v9F6F1bH0gEFX3PYECriSpq63qa1E2H0Z8Q8EqXlabsyb7SCDQVSVMqvT0G7BZX11Fjb2cCQjnpp6iLwhOEm-NVApqEmOpGooyDkGYqn8wWcC_ltgGpdx1IVq5U7J4O_-9Ki73bmZchzdhCOdB9yL9absuN0bU3jGxIGF1MA637uwWQugTwxY9R8f8FTuZZbNoX_nj_eXsAjdilzDAnx-hk2u-qLDRpc8k8ppEAtA6uPwmyXMixncny6Ri6C61EpaY7-DD4z3ByRonK5wyYCSFzzTqB9YIzelkcq6KrLa7jk0hcEfgcmZB9d3ZB3h995-shoVboCc1_i1LSO_TLF5lbtCjZyvcmr1YOMbFuTmtDkb39Zbp2LeUsrjRoWb--zB0hkKRptUjvHlx4Bun1lzmRhKOuqy7b18oSasvwjZDJg4-ShlumAwZyByHTbDycS4eiOjWA_2tBxRpMC9OPcCcBya350euaA-tmiI2v1GfyLyJu4zC_OyUs9R4ilXMFJM92GVS_4XxAhAp3ml3UbIowDAqgBObIzWjt4GxnupWfg9eaLzWei3t6RpdJFQF28hmpUu3kQafcMVPnKFBYeomvMcc1Oy0LIJB2IJeFN5XEWC6uPKBVVpdJvSN1-WBWLSk_DKs8w", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb044ca7-7425-4cb5-9ed8-ea993877ebb7", "record_id": "flaws_cloudtrail:0000259:fb044ca7-7425-4cb5-9ed8-ea993877ebb7", "row_index": 259, "timestamp": "2019-08-21T13:38:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb044ca7-7425-4cb5-9ed8-ea993877ebb7", "eventTime": "2019-08-21T13:38:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: lK5OCYDBYlzB11-jljjWih2v9F6F1bH0gEFX3PYECriSpq63qa1E2H0Z8Q8EqXlabsyb7SCDQVSVMqvT0G7BZX11Fjb2cCQjnpp6iLwhOEm-NVApqEmOpGooyDkGYqn8wWcC_ltgGpdx1IVq5U7J4O_-9Ki73bmZchzdhCOdB9yL9absuN0bU3jGxIGF1MA637uwWQugTwxY9R8f8FTuZZbNoX_nj_eXsAjdilzDAnx-hk2u-qLDRpc8k8ppEAtA6uPwmyXMixncny6Ri6C61EpaY7-DD4z3ByRonK5wyYCSFzzTqB9YIzelkcq6KrLa7jk0hcEfgcmZB9d3ZB3h995-shoVboCc1_i1LSO_TLF5lbtCjZyvcmr1YOMbFuTmtDkb39Zbp2LeUsrjRoWb--zB0hkKRptUjvHlx4Bun1lzmRhKOuqy7b18oSasvwjZDJg4-ShlumAwZyByHTbDycS4eiOjWA_2tBxRpMC9OPcCcBya350euaA-tmiI2v1GfyLyJu4zC_OyUs9R4ilXMFJM92GVS_4XxAhAp3ml3UbIowDAqgBObIzWjt4GxnupWfg9eaLzWei3t6RpdJFQF28hmpUu3kQafcMVPnKFBYeomvMcc1Oy0LIJB2IJeFN5XEWC6uPKBVVpdJvSN1-WBWLSk_DKs8w", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd40e1ed-f000-4dcf-b346-5aafe60a3291", "record_id": "flaws_cloudtrail:0000260:fd40e1ed-f000-4dcf-b346-5aafe60a3291", "row_index": 260, "timestamp": "2019-08-21T13:38:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd40e1ed-f000-4dcf-b346-5aafe60a3291", "eventTime": "2019-08-21T13:38:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LhlUAKTj_1ro3uTgboBr7Lh33f4stVFpYiOFpl5BSsA0EoS5JOB4MQMqAa_f6ke-BhFLRjLQm1dM5_cim1QioGJVKIEV5KL_Ak6W32-xTYFa6L8vQvhrXea2zFBofzZB5oiz5pUFmvgNlFCmkBkTdrC4NxpqXAjHFEulvUvaf3Z0y-qcQdy0B3itbagQwUJs1qxbUlHdfVnF-mTf6LdLxITAXiHmmGALThYcZ2hTNCO8hA7rDlvlDLtXFQ58FGHTNDGodVIiaCbWMfJN0J8wul8zH9doxa4CvFG5kYhbu5SfErHrhnk9QQdEZe60orpjLtMg4fTsmhOrBq6sqE-roB4LpuLUF232ad4Tna6ZJ3epU0HeR12c_Fu-6vYDLdAfJrN3it0pF1GG3_1UoK7OLdkV97dc3WJVbgviMjjCUWu_Eaoqh2bv9bc1NY7LtFopaSDUJGlbU6v8VlMShJRehiRxs4oQFQArb1RVwNPcz3f8rFz8tP8596UYhxGUVpY_kyHXGJlCcwXBJN47xAWCypjIc5XHNjmkDpZK0r7ST_zl6WwqKSuF8rPHwhjIcZmDdnQ_RAu2deUj7Iasv0nOEo5ZCJPifPt8VZfZCS7w5qR011m8RxNENzKbpaLfTIB45ULxgKnvIi38EwTJgTyrKXdUWStVaNU", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd40e1ed-f000-4dcf-b346-5aafe60a3291", "record_id": "flaws_cloudtrail:0000261:fd40e1ed-f000-4dcf-b346-5aafe60a3291", "row_index": 261, "timestamp": "2019-08-21T13:38:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd40e1ed-f000-4dcf-b346-5aafe60a3291", "eventTime": "2019-08-21T13:38:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LhlUAKTj_1ro3uTgboBr7Lh33f4stVFpYiOFpl5BSsA0EoS5JOB4MQMqAa_f6ke-BhFLRjLQm1dM5_cim1QioGJVKIEV5KL_Ak6W32-xTYFa6L8vQvhrXea2zFBofzZB5oiz5pUFmvgNlFCmkBkTdrC4NxpqXAjHFEulvUvaf3Z0y-qcQdy0B3itbagQwUJs1qxbUlHdfVnF-mTf6LdLxITAXiHmmGALThYcZ2hTNCO8hA7rDlvlDLtXFQ58FGHTNDGodVIiaCbWMfJN0J8wul8zH9doxa4CvFG5kYhbu5SfErHrhnk9QQdEZe60orpjLtMg4fTsmhOrBq6sqE-roB4LpuLUF232ad4Tna6ZJ3epU0HeR12c_Fu-6vYDLdAfJrN3it0pF1GG3_1UoK7OLdkV97dc3WJVbgviMjjCUWu_Eaoqh2bv9bc1NY7LtFopaSDUJGlbU6v8VlMShJRehiRxs4oQFQArb1RVwNPcz3f8rFz8tP8596UYhxGUVpY_kyHXGJlCcwXBJN47xAWCypjIc5XHNjmkDpZK0r7ST_zl6WwqKSuF8rPHwhjIcZmDdnQ_RAu2deUj7Iasv0nOEo5ZCJPifPt8VZfZCS7w5qR011m8RxNENzKbpaLfTIB45ULxgKnvIi38EwTJgTyrKXdUWStVaNU", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92eead7e-077d-4794-b4dc-8ee5f7dfe75f", "record_id": "flaws_cloudtrail:0000262:92eead7e-077d-4794-b4dc-8ee5f7dfe75f", "row_index": 262, "timestamp": "2019-08-21T13:38:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92eead7e-077d-4794-b4dc-8ee5f7dfe75f", "eventTime": "2019-08-21T13:38:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92eead7e-077d-4794-b4dc-8ee5f7dfe75f", "record_id": "flaws_cloudtrail:0000263:92eead7e-077d-4794-b4dc-8ee5f7dfe75f", "row_index": 263, "timestamp": "2019-08-21T13:38:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92eead7e-077d-4794-b4dc-8ee5f7dfe75f", "eventTime": "2019-08-21T13:38:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2a59f7-13b8-45bb-8ca6-40435d462b2b", "record_id": "flaws_cloudtrail:0000264:cc2a59f7-13b8-45bb-8ca6-40435d462b2b", "row_index": 264, "timestamp": "2019-08-21T13:38:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2a59f7-13b8-45bb-8ca6-40435d462b2b", "eventTime": "2019-08-21T13:38:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cpw3M-qySJzWmwTel2MA7v0TGjD772mjgTMmy7G8Ed0tvrhRif0k1L1aGeNFx7_6iA4ryW65Z71lcrdbfXlw806tQWPijZxYkjXTRy0R97kJec-SMO5CGtkO239b5EuvRb5lQoLPDI9AbLP23qzsvxOlsil8VZPThfaOSVYEq-C--Vf1eZMvr_MskyF5r5sV0PclJ5USGWctWwt9vBFnXwfy7ki3m9Gdryj1_iILWNpaXrKJg2cnBWlZupqCY6r02hsW-zAm1jVd88xyoybTJ58OfenJ7NPc9VEvN27b_GvvkFue1pEXswe-PHBkOATDGLPVexbMZ45DUJY_1PANZmmb53SVbqQ5cJjSBUH0IZipjYbLhLq5eGpbspckabMCDcWjn_6CL52e8PRqspO8Ga90fM6A98v3eg_K35I7g-MiKKvvrj4lJPXDK6esyXtRVR0VIANnGaZ2DxScNpPmW3CVfZlPixZRQPVcsEEbYhbM2JZVNaJtxhm4A0-ZC769aEyiuaXrhsvsVA7IWKvBXjrve3GHh9RMitZhWBozRGWczohqi83Ol8g8A6O78yzL2wAMaiWtvf6SpczXLgA4DdebI96ZCaEu_7cbfiQkVlHqOh8vP_kiLY7rZAdRh1d3FzAddSnZFoDMz_gx3vFY9LAhb7Z6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc2a59f7-13b8-45bb-8ca6-40435d462b2b", "record_id": "flaws_cloudtrail:0000265:cc2a59f7-13b8-45bb-8ca6-40435d462b2b", "row_index": 265, "timestamp": "2019-08-21T13:38:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc2a59f7-13b8-45bb-8ca6-40435d462b2b", "eventTime": "2019-08-21T13:38:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cpw3M-qySJzWmwTel2MA7v0TGjD772mjgTMmy7G8Ed0tvrhRif0k1L1aGeNFx7_6iA4ryW65Z71lcrdbfXlw806tQWPijZxYkjXTRy0R97kJec-SMO5CGtkO239b5EuvRb5lQoLPDI9AbLP23qzsvxOlsil8VZPThfaOSVYEq-C--Vf1eZMvr_MskyF5r5sV0PclJ5USGWctWwt9vBFnXwfy7ki3m9Gdryj1_iILWNpaXrKJg2cnBWlZupqCY6r02hsW-zAm1jVd88xyoybTJ58OfenJ7NPc9VEvN27b_GvvkFue1pEXswe-PHBkOATDGLPVexbMZ45DUJY_1PANZmmb53SVbqQ5cJjSBUH0IZipjYbLhLq5eGpbspckabMCDcWjn_6CL52e8PRqspO8Ga90fM6A98v3eg_K35I7g-MiKKvvrj4lJPXDK6esyXtRVR0VIANnGaZ2DxScNpPmW3CVfZlPixZRQPVcsEEbYhbM2JZVNaJtxhm4A0-ZC769aEyiuaXrhsvsVA7IWKvBXjrve3GHh9RMitZhWBozRGWczohqi83Ol8g8A6O78yzL2wAMaiWtvf6SpczXLgA4DdebI96ZCaEu_7cbfiQkVlHqOh8vP_kiLY7rZAdRh1d3FzAddSnZFoDMz_gx3vFY9LAhb7Z6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "d2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e8fe1fa-c817-4576-9046-570e4e0049b5", "record_id": "flaws_cloudtrail:0000266:6e8fe1fa-c817-4576-9046-570e4e0049b5", "row_index": 266, "timestamp": "2019-08-21T13:38:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e8fe1fa-c817-4576-9046-570e4e0049b5", "eventTime": "2019-08-21T13:38:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e8fe1fa-c817-4576-9046-570e4e0049b5", "record_id": "flaws_cloudtrail:0000267:6e8fe1fa-c817-4576-9046-570e4e0049b5", "row_index": 267, "timestamp": "2019-08-21T13:38:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e8fe1fa-c817-4576-9046-570e4e0049b5", "eventTime": "2019-08-21T13:38:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ce295894-a2ae-431f-a40c-6e50609b836f", "record_id": "flaws_cloudtrail:0000268:2ce295894-a2ae-431f-a40c-6e50609b836f", "row_index": 268, "timestamp": "2019-08-21T13:38:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ce295894-a2ae-431f-a40c-6e50609b836f", "eventTime": "2019-08-21T13:38:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Q1_1_YEpUZ7XJe42fpfIHfFBs_ZHi5k-zsvKuF6AzZ1hchiHx4Rgc33OcdzZFmc065R38TSDSawB4d4sdXp1_cacRKNVKWlxefd3xuoYEYuMPQLG7htKCJmUGgh5DqIJHpg5tRh8tAx2CegVBjs1ZiKMFehCdh6CdNDwqjqEjze8_q1SxPwWtT_x-mfaCqYCNGqn49tPgqHq_efkKts1g10VYwTSq2y_dsfMlMmlP1usEPfHdXOyPELuf93a-rLTlpVvcqzyM19ncYLZCwuibM7rax4Cacn3TPvr8U1N5wiTblFyV8wMzQw4tA1tuZk6qTcnZR1JZrnaYt8wajDBCMu-oAFiz0YCYqWlrNAy0cYkYlxrB_Fe2q0yk81ND8zDwpEZ3wO1mJz2XXP4YzWzLdXiNLF-JMYzPWrP5OxF5muIACIvRUM7ScapYSoaSwM4dmpRWKFwjJ3BHcKRwhP51U1B7hEHHdc7laKVDSSzuJVEAqRgf7oKwCO4jiFVoWPEiqNvKKCs6rrVsAXRFmgeoKKh_h4GRK9Z4DMT0QeTRy-wE8tmF3jKwHDO0mvlbGzX71ab6FoSFeJ0HQ8eAtbOIbQeus4115AygQYaXdDo4BeEO2lNzuK5mhOIdV0lTd5X8BhC2gdC_3Mhvi5pTX3nxPPTSNq41g", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ce295894-a2ae-431f-a40c-6e50609b836f", "record_id": "flaws_cloudtrail:0000269:2ce295894-a2ae-431f-a40c-6e50609b836f", "row_index": 269, "timestamp": "2019-08-21T13:38:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1937, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ce295894-a2ae-431f-a40c-6e50609b836f", "eventTime": "2019-08-21T13:38:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Q1_1_YEpUZ7XJe42fpfIHfFBs_ZHi5k-zsvKuF6AzZ1hchiHx4Rgc33OcdzZFmc065R38TSDSawB4d4sdXp1_cacRKNVKWlxefd3xuoYEYuMPQLG7htKCJmUGgh5DqIJHpg5tRh8tAx2CegVBjs1ZiKMFehCdh6CdNDwqjqEjze8_q1SxPwWtT_x-mfaCqYCNGqn49tPgqHq_efkKts1g10VYwTSq2y_dsfMlMmlP1usEPfHdXOyPELuf93a-rLTlpVvcqzyM19ncYLZCwuibM7rax4Cacn3TPvr8U1N5wiTblFyV8wMzQw4tA1tuZk6qTcnZR1JZrnaYt8wajDBCMu-oAFiz0YCYqWlrNAy0cYkYlxrB_Fe2q0yk81ND8zDwpEZ3wO1mJz2XXP4YzWzLdXiNLF-JMYzPWrP5OxF5muIACIvRUM7ScapYSoaSwM4dmpRWKFwjJ3BHcKRwhP51U1B7hEHHdc7laKVDSSzuJVEAqRgf7oKwCO4jiFVoWPEiqNvKKCs6rrVsAXRFmgeoKKh_h4GRK9Z4DMT0QeTRy-wE8tmF3jKwHDO0mvlbGzX71ab6FoSFeJ0HQ8eAtbOIbQeus4115AygQYaXdDo4BeEO2lNzuK5mhOIdV0lTd5X8BhC2gdC_3Mhvi5pTX3nxPPTSNq41g", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e05dbf75-8169-4efc-96cf-064442ca9722", "record_id": "flaws_cloudtrail:0000270:e05dbf75-8169-4efc-96cf-064442ca9722", "row_index": 270, "timestamp": "2019-08-21T13:38:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e05dbf75-8169-4efc-96cf-064442ca9722", "eventTime": "2019-08-21T13:38:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e05dbf75-8169-4efc-96cf-064442ca9722", "record_id": "flaws_cloudtrail:0000271:e05dbf75-8169-4efc-96cf-064442ca9722", "row_index": 271, "timestamp": "2019-08-21T13:38:32Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e05dbf75-8169-4efc-96cf-064442ca9722", "eventTime": "2019-08-21T13:38:32Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "727e1a6a-1ca8-4c51-b3b0-ac574b472af0", "record_id": "flaws_cloudtrail:0000272:727e1a6a-1ca8-4c51-b3b0-ac574b472af0", "row_index": 272, "timestamp": "2019-08-21T13:39:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "727e1a6a-1ca8-4c51-b3b0-ac574b472af0", "eventTime": "2019-08-21T13:39:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "727e1a6a-1ca8-4c51-b3b0-ac574b472af0", "record_id": "flaws_cloudtrail:0000273:727e1a6a-1ca8-4c51-b3b0-ac574b472af0", "row_index": 273, "timestamp": "2019-08-21T13:39:05Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1282, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "727e1a6a-1ca8-4c51-b3b0-ac574b472af0", "eventTime": "2019-08-21T13:39:05Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258a9d72-fd47-4656-be53-52f117318", "record_id": "flaws_cloudtrail:0000274:258a9d72-fd47-4656-be53-52f117318", "row_index": 274, "timestamp": "2019-08-21T13:40:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258a9d72-fd47-4656-be53-52f117318", "eventTime": "2019-08-21T13:40:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "258a9d72-fd47-4656-be53-52f117318", "record_id": "flaws_cloudtrail:0000275:258a9d72-fd47-4656-be53-52f117318", "row_index": 275, "timestamp": "2019-08-21T13:40:12Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1280, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "258a9d72-fd47-4656-be53-52f117318", "eventTime": "2019-08-21T13:40:12Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b818ef-88e9-4e8d-a619-4aeead94ab34", "record_id": "flaws_cloudtrail:0000276:05b818ef-88e9-4e8d-a619-4aeead94ab34", "row_index": 276, "timestamp": "2019-08-21T13:40:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b818ef-88e9-4e8d-a619-4aeead94ab34", "eventTime": "2019-08-21T13:40:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: E26O_1cXCDYurxcdZuG-csvIAPzoII6lEYbtKNp6A533LVD3cTKq4XU6qejfVDuBG4ZE3unFgoOnIWCe_oULaOZo3CH2_5Zh7DhriEn-iTTuLKBWop4lWZ8FJXXVJgxIFr-2E1uC1fjaEQDy-qUTfRdYoKBAvBkzznU4sv2EOFlcdyWpTDBzWXKQ-STWtFUuuq3xR3AWHGArfZuz2gpHkA1s6YCofVDtWoaH7e0eLjdoksmr1AxCs5s0aG2EsRkuYMeR3BAkImzUxUChgWFiuPzJ-5H1WqDNhKixinMNd9biiEGNoW5lhmBmaTLk_d4ql_RaFAlLs4fj7TzNAFfejeMksA6jyu0_vVYhUCvT3PNaS-WqShbZ1O5oh0B-hN821FkGuW9mDGMDTeMsFE2wQsxGB-uuzdDBImn95OjXeQ5NxaKU-nG0A4m5Ljslqsvuw1Jpms9NCpdCLwNvqT8E7C_KfA4EvtX_YPVCek8HK-wLBOHgqX014LeWPon6DyL5RKR6qT7vcK0ATAumsPSXkvnmvdzFbsT6GLEP-BlLnJvTVeqVIxdQLBT8A60dyvV25hcwsJof9t-_aHHVzfqOcKohFo3-VmzHBD8qthCJMAwxE747faPIf-pqRaF7I-5d_TdRLQyDnXz4nTB8TUMsFPMcE9ay", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70247b7-3181-404b-8c8d-43c8279cde7a", "record_id": "flaws_cloudtrail:0000277:70247b7-3181-404b-8c8d-43c8279cde7a", "row_index": 277, "timestamp": "2019-08-21T13:40:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1932, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70247b7-3181-404b-8c8d-43c8279cde7a", "eventTime": "2019-08-21T13:40:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IZxpE5VY2Zg5jWIQ6DuTTNblT2jZgvfLEdRVzyzFpFLtvowNZ4HpsDEA8iyaYgahaj6m_I31uc0cnnMeh5mA9ptM1np_A7FPvjtYq-4xBvq4MHFoM1lo9X9NaMwRkwyH6N1yH19TbRdCXZXVh9hmyHOJJRekGrTT799JkMZb0buOf66rCRf4XbTSmURiOGHZcJi3AFZ6jgWDRI_7aTcZCRa9eNdm4YE03u9Y0Erelsi4-_R7fyoTxT12HjlSCM_8np5VLR9lAR3DsBFogOmkLP7sWR6RIKqBAiqwyXjvCYjeCVOhXxaU1Olr00nzPkjhf3bPBRcoHqnAJu0pQNaFhbZ-EBRP3o_Vl6mTZi23fUKvxwfudSnR6nORdhV3p0m1PfeGt9B5loOkX4QsdqLWstSDerLJEzr7XRjwFWFq0OLPzTbulAHYpOq9uq0gSSWNpuqPXyBQTKwp4DMfJPWHmkeFX-nGkPRICmQYA91hgV7KwbQQfm8vSXunw5cSP-RDMQu3d0VC_W3-iWP4RAhH5AKDzgP0KUTFnnQiNxH7c0G1S9n_N8qc-k8riTqv0dbIfuGAU-WbM523PkhF1SIRTSaEr8m76uKeubPfNiU-Oeo9eeIgGrLwHksTectuBhrG2-CRIiVm7E92plZx60EiebYYlsA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05b818ef-88e9-4e8d-a619-4aeead94ab34", "record_id": "flaws_cloudtrail:0000278:05b818ef-88e9-4e8d-a619-4aeead94ab34", "row_index": 278, "timestamp": "2019-08-21T13:40:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05b818ef-88e9-4e8d-a619-4aeead94ab34", "eventTime": "2019-08-21T13:40:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: E26O_1cXCDYurxcdZuG-csvIAPzoII6lEYbtKNp6A533LVD3cTKq4XU6qejfVDuBG4ZE3unFgoOnIWCe_oULaOZo3CH2_5Zh7DhriEn-iTTuLKBWop4lWZ8FJXXVJgxIFr-2E1uC1fjaEQDy-qUTfRdYoKBAvBkzznU4sv2EOFlcdyWpTDBzWXKQ-STWtFUuuq3xR3AWHGArfZuz2gpHkA1s6YCofVDtWoaH7e0eLjdoksmr1AxCs5s0aG2EsRkuYMeR3BAkImzUxUChgWFiuPzJ-5H1WqDNhKixinMNd9biiEGNoW5lhmBmaTLk_d4ql_RaFAlLs4fj7TzNAFfejeMksA6jyu0_vVYhUCvT3PNaS-WqShbZ1O5oh0B-hN821FkGuW9mDGMDTeMsFE2wQsxGB-uuzdDBImn95OjXeQ5NxaKU-nG0A4m5Ljslqsvuw1Jpms9NCpdCLwNvqT8E7C_KfA4EvtX_YPVCek8HK-wLBOHgqX014LeWPon6DyL5RKR6qT7vcK0ATAumsPSXkvnmvdzFbsT6GLEP-BlLnJvTVeqVIxdQLBT8A60dyvV25hcwsJof9t-_aHHVzfqOcKohFo3-VmzHBD8qthCJMAwxE747faPIf-pqRaF7I-5d_TdRLQyDnXz4nTB8TUMsFPMcE9ay", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70247b7-3181-404b-8c8d-43c8279cde7a", "record_id": "flaws_cloudtrail:0000279:70247b7-3181-404b-8c8d-43c8279cde7a", "row_index": 279, "timestamp": "2019-08-21T13:40:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1932, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70247b7-3181-404b-8c8d-43c8279cde7a", "eventTime": "2019-08-21T13:40:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: IZxpE5VY2Zg5jWIQ6DuTTNblT2jZgvfLEdRVzyzFpFLtvowNZ4HpsDEA8iyaYgahaj6m_I31uc0cnnMeh5mA9ptM1np_A7FPvjtYq-4xBvq4MHFoM1lo9X9NaMwRkwyH6N1yH19TbRdCXZXVh9hmyHOJJRekGrTT799JkMZb0buOf66rCRf4XbTSmURiOGHZcJi3AFZ6jgWDRI_7aTcZCRa9eNdm4YE03u9Y0Erelsi4-_R7fyoTxT12HjlSCM_8np5VLR9lAR3DsBFogOmkLP7sWR6RIKqBAiqwyXjvCYjeCVOhXxaU1Olr00nzPkjhf3bPBRcoHqnAJu0pQNaFhbZ-EBRP3o_Vl6mTZi23fUKvxwfudSnR6nORdhV3p0m1PfeGt9B5loOkX4QsdqLWstSDerLJEzr7XRjwFWFq0OLPzTbulAHYpOq9uq0gSSWNpuqPXyBQTKwp4DMfJPWHmkeFX-nGkPRICmQYA91hgV7KwbQQfm8vSXunw5cSP-RDMQu3d0VC_W3-iWP4RAhH5AKDzgP0KUTFnnQiNxH7c0G1S9n_N8qc-k8riTqv0dbIfuGAU-WbM523PkhF1SIRTSaEr8m76uKeubPfNiU-Oeo9eeIgGrLwHksTectuBhrG2-CRIiVm7E92plZx60EiebYYlsA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fa4579d-7610-4e81-8b61-48af0fee2103", "record_id": "flaws_cloudtrail:0000280:9fa4579d-7610-4e81-8b61-48af0fee2103", "row_index": 280, "timestamp": "2019-08-21T13:40:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fa4579d-7610-4e81-8b61-48af0fee2103", "eventTime": "2019-08-21T13:40:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fa4579d-7610-4e81-8b61-48af0fee2103", "record_id": "flaws_cloudtrail:0000281:9fa4579d-7610-4e81-8b61-48af0fee2103", "row_index": 281, "timestamp": "2019-08-21T13:40:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fa4579d-7610-4e81-8b61-48af0fee2103", "eventTime": "2019-08-21T13:40:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ad7632-636b-404d-b068-004080b35fadd", "record_id": "flaws_cloudtrail:0000282:01ad7632-636b-404d-b068-004080b35fadd", "row_index": 282, "timestamp": "2019-08-21T13:40:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ad7632-636b-404d-b068-004080b35fadd", "eventTime": "2019-08-21T13:40:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01ad7632-636b-404d-b068-004080b35fadd", "record_id": "flaws_cloudtrail:0000283:01ad7632-636b-404d-b068-004080b35fadd", "row_index": 283, "timestamp": "2019-08-21T13:40:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01ad7632-636b-404d-b068-004080b35fadd", "eventTime": "2019-08-21T13:40:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "p2.xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "656c8a49-eb91-420f-b30d-5b0a59eea084", "record_id": "flaws_cloudtrail:0000284:656c8a49-eb91-420f-b30d-5b0a59eea084", "row_index": 284, "timestamp": "2019-08-21T13:40:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "656c8a49-eb91-420f-b30d-5b0a59eea084", "eventTime": "2019-08-21T13:40:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LR-d0l7uacgWdTuwotMM9ASJT3d2YeW2sYJAEW6Y5g0ed_-vg_60CeS73KDXFc3uBhlmmO-WoMQ67LprWJPHbeP31JAPcGId2Yhj7Mm9oKHNDMfuSCGUv-VIvytClNz1SP6RbemE138879z94acUhWj1UhRc_iY-_reZgjl84BUZukryUC5rqTF46Ugp4IYnzoKpAb_eXRUy_A4QvkhvWIcegX0LDFu8Jv0eYIjv_PRxddlKgOpuGUr_WB23-YjbbS8KvSeNXd5bB16RBcv3ffY6ZbNWdVm8eatrQJ2XAv93Df1E6hHiufXTh8OOuOECQQrGMi103m-SSK3iMqGcZ8qXxlVZ8oFBvePeghXhz7Lm38fji6zMGct5m0SlXBRwuAGanjfN-SJSZlfevqYUo3YsJCQnn-CgG3NtsfE93tuP7VzQOJWcdu564LskooVtSk2B9Ec1X_M4Frk0-xhtJS4snmulslGPrS7xansYRU41VODel-9AcF1zAO8b4g8jvOsDB2TJT-qptNNt1ejuk2JC5SQLtBTxsqS-vBoLmPANx5DNY-yczoEQfLWpNvCEO2tBlTLifFBIKftQ4i2IQ_9NdYyLddHZh88QqnYfqwGUMg1OhtieTiFnzrg-fkojhlHJIzzuWK0ggFGxKb6Vkrxhc4ld5", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "656c8a49-eb91-420f-b30d-5b0a59eea084", "record_id": "flaws_cloudtrail:0000285:656c8a49-eb91-420f-b30d-5b0a59eea084", "row_index": 285, "timestamp": "2019-08-21T13:40:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "656c8a49-eb91-420f-b30d-5b0a59eea084", "eventTime": "2019-08-21T13:40:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LR-d0l7uacgWdTuwotMM9ASJT3d2YeW2sYJAEW6Y5g0ed_-vg_60CeS73KDXFc3uBhlmmO-WoMQ67LprWJPHbeP31JAPcGId2Yhj7Mm9oKHNDMfuSCGUv-VIvytClNz1SP6RbemE138879z94acUhWj1UhRc_iY-_reZgjl84BUZukryUC5rqTF46Ugp4IYnzoKpAb_eXRUy_A4QvkhvWIcegX0LDFu8Jv0eYIjv_PRxddlKgOpuGUr_WB23-YjbbS8KvSeNXd5bB16RBcv3ffY6ZbNWdVm8eatrQJ2XAv93Df1E6hHiufXTh8OOuOECQQrGMi103m-SSK3iMqGcZ8qXxlVZ8oFBvePeghXhz7Lm38fji6zMGct5m0SlXBRwuAGanjfN-SJSZlfevqYUo3YsJCQnn-CgG3NtsfE93tuP7VzQOJWcdu564LskooVtSk2B9Ec1X_M4Frk0-xhtJS4snmulslGPrS7xansYRU41VODel-9AcF1zAO8b4g8jvOsDB2TJT-qptNNt1ejuk2JC5SQLtBTxsqS-vBoLmPANx5DNY-yczoEQfLWpNvCEO2tBlTLifFBIKftQ4i2IQ_9NdYyLddHZh88QqnYfqwGUMg1OhtieTiFnzrg-fkojhlHJIzzuWK0ggFGxKb6Vkrxhc4ld5", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf98ea87-b1dd-414b-9b2f-4ffe68b2d825", "record_id": "flaws_cloudtrail:0000286:cf98ea87-b1dd-414b-9b2f-4ffe68b2d825", "row_index": 286, "timestamp": "2019-08-21T13:40:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf98ea87-b1dd-414b-9b2f-4ffe68b2d825", "eventTime": "2019-08-21T13:40:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rlYNIPT2fyBRIEnt0Qfq2qp9TEN9bZjZYMBCcvCrv40SXp8J64YRScyZHHjH6YobIxgEVvbHErAO4ZUvsxuAnsoTwuf8qSkw9ohZIgKXdJ4hkIP8pam_Utovrz2FXoSO9m2Y4SHlxc_NvRbBQotZypfZrSU68rRlivDGgV7SAOYBInXlJBJwK55AQeNWsI7VmQBtqbWMehJfqb2yKhDAi1U1vHyW-R1YPQPffewegu6TE-hLZSht4So8F-UHVHt_Mv-WAM4gM8YGWEUaDwgr0q8vLVPQ5c7NxELWp1LSxUlldxXC3oIoDhGpKsxo0keT-ihRt_hGxgcBCe29RYlOqbsJZRl9Se8wfOm9EDiuBFnlic4ZwV_bcWXin2dk-Vmrr0NZth1numBUvMh7jXzlhwy1q0KDGbVdi3mzxBrCPWmZF-a8Hm--6Vvu8t7lrzKNPzVzY_KLa5WKpK68jSUZjOZN1TOR8EBWcSD7Knqw9c7VpKhXy1XeQ4OkP4L8pl7cu78R8qNWwPsPvmbL6nOFjSQyJ6EANFU7pcdgkLav2wSgtLhD7FWAO3upNtgMqZ_Ns69AtIVzGjlL6tBAgyOCDDV8ZglUaXGQxLwqYWQnfcFCbN9jjqU15JjygG2HhvO0yoQYxpnOcR7ALIHHaEq0h9xMbBZE", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf98ea87-b1dd-414b-9b2f-4ffe68b2d825", "record_id": "flaws_cloudtrail:0000287:cf98ea87-b1dd-414b-9b2f-4ffe68b2d825", "row_index": 287, "timestamp": "2019-08-21T13:40:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf98ea87-b1dd-414b-9b2f-4ffe68b2d825", "eventTime": "2019-08-21T13:40:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: rlYNIPT2fyBRIEnt0Qfq2qp9TEN9bZjZYMBCcvCrv40SXp8J64YRScyZHHjH6YobIxgEVvbHErAO4ZUvsxuAnsoTwuf8qSkw9ohZIgKXdJ4hkIP8pam_Utovrz2FXoSO9m2Y4SHlxc_NvRbBQotZypfZrSU68rRlivDGgV7SAOYBInXlJBJwK55AQeNWsI7VmQBtqbWMehJfqb2yKhDAi1U1vHyW-R1YPQPffewegu6TE-hLZSht4So8F-UHVHt_Mv-WAM4gM8YGWEUaDwgr0q8vLVPQ5c7NxELWp1LSxUlldxXC3oIoDhGpKsxo0keT-ihRt_hGxgcBCe29RYlOqbsJZRl9Se8wfOm9EDiuBFnlic4ZwV_bcWXin2dk-Vmrr0NZth1numBUvMh7jXzlhwy1q0KDGbVdi3mzxBrCPWmZF-a8Hm--6Vvu8t7lrzKNPzVzY_KLa5WKpK68jSUZjOZN1TOR8EBWcSD7Knqw9c7VpKhXy1XeQ4OkP4L8pl7cu78R8qNWwPsPvmbL6nOFjSQyJ6EANFU7pcdgkLav2wSgtLhD7FWAO3upNtgMqZ_Ns69AtIVzGjlL6tBAgyOCDDV8ZglUaXGQxLwqYWQnfcFCbN9jjqU15JjygG2HhvO0yoQYxpnOcR7ALIHHaEq0h9xMbBZE", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b44be006-dbf0-4f16-92bb-a4579d6c30fd", "record_id": "flaws_cloudtrail:0000288:b44be006-dbf0-4f16-92bb-a4579d6c30fd", "row_index": 288, "timestamp": "2019-08-21T13:40:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1932, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b44be006-dbf0-4f16-92bb-a4579d6c30fd", "eventTime": "2019-08-21T13:40:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: c6iCvWZhEu6pOo0XJ0eA90r7DAqxBJdlXNu4uOQVYMMh__VYozyJh2ELjnYcmKQKs-ba6YYPLLRzlrhsVaasIOy_UjN2ssF_AzcMw9XbdPOCyRVzRHt-ODj_zXYHMEk9bKCIcLoLBSFWZN9DRpfKoQJjpXWUIo64RgXbvFdVqTbSgt48jvKCGYm4bAUjulILxLVu0_Wf8vWF8BKgKgRrDivIUGmsmw-mk4XAJZSm8P8OpYhxJ3WqCxlkSBoXrB1IRG6EsQQHAKP4Ttnx6-JynzccuQsdZRxD9qnfHnR_e6gclD80dJOLBKhXhl6SPFzfUsgdq1v6JeL8ziJloT88skpt-QdDLJP474F3JqwvT-2j_wRctjzKGYFpIcLPYtbARRd_K1xsLgxRVZ7XHdIczSMU_GA0uhd_l9EPiKqqjtl2Q7y8cfQOscEyS2biqmbMlPs3yiYv85wP8_Ll0NWMlDd2FWuyRglbor6WeB71MpFqToCU5q_cvPsYHVk4FlT_iiuLXrgxNSv4P2bfa8NMyXa9yFJE-xAExnN_ruau7ZPVfQMNXuoILgz2PXBSXwOZZp7bON9r8YqknMr2DvB-3nkVZtF-mYXW8Sd6rj8hIeQLCASJFZNFyrJTEk-vSi8w8i_Q7ccsKuGyPM74C90M_Qa9uGc", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b44be006-dbf0-4f16-92bb-a4579d6c30fd", "record_id": "flaws_cloudtrail:0000289:b44be006-dbf0-4f16-92bb-a4579d6c30fd", "row_index": 289, "timestamp": "2019-08-21T13:40:28Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1932, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b44be006-dbf0-4f16-92bb-a4579d6c30fd", "eventTime": "2019-08-21T13:40:28Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: c6iCvWZhEu6pOo0XJ0eA90r7DAqxBJdlXNu4uOQVYMMh__VYozyJh2ELjnYcmKQKs-ba6YYPLLRzlrhsVaasIOy_UjN2ssF_AzcMw9XbdPOCyRVzRHt-ODj_zXYHMEk9bKCIcLoLBSFWZN9DRpfKoQJjpXWUIo64RgXbvFdVqTbSgt48jvKCGYm4bAUjulILxLVu0_Wf8vWF8BKgKgRrDivIUGmsmw-mk4XAJZSm8P8OpYhxJ3WqCxlkSBoXrB1IRG6EsQQHAKP4Ttnx6-JynzccuQsdZRxD9qnfHnR_e6gclD80dJOLBKhXhl6SPFzfUsgdq1v6JeL8ziJloT88skpt-QdDLJP474F3JqwvT-2j_wRctjzKGYFpIcLPYtbARRd_K1xsLgxRVZ7XHdIczSMU_GA0uhd_l9EPiKqqjtl2Q7y8cfQOscEyS2biqmbMlPs3yiYv85wP8_Ll0NWMlDd2FWuyRglbor6WeB71MpFqToCU5q_cvPsYHVk4FlT_iiuLXrgxNSv4P2bfa8NMyXa9yFJE-xAExnN_ruau7ZPVfQMNXuoILgz2PXBSXwOZZp7bON9r8YqknMr2DvB-3nkVZtF-mYXW8Sd6rj8hIeQLCASJFZNFyrJTEk-vSi8w8i_Q7ccsKuGyPM74C90M_Qa9uGc", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b80cc5c-7d17-4c84-a75c-a2eda1dd931d", "record_id": "flaws_cloudtrail:0000290:9b80cc5c-7d17-4c84-a75c-a2eda1dd931d", "row_index": 290, "timestamp": "2019-08-21T13:40:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b80cc5c-7d17-4c84-a75c-a2eda1dd931d", "eventTime": "2019-08-21T13:40:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: je7OuO-F6AGCEOQzif97KW_Kmhfu_M24cENE9rv_ZsdFzEqY1_lPjvDQidxhqy_qyA6mvCc2VcoCuSo3kCIG9xqJoY7wqePwXq5IRXgm-6nIuLztP28svJumO1DN2zFGtnhfJK9wOSIn5d_7JvwK9Gh7aNXa17hsZ5jagPcvyUNAFspitOluzG6PdG64cDzeW0sldXbOcgsuBdE7vSvkTwS2BhIc63USttn02KAmQ3iGaOozYzkn0ZFMTTEnyp0Ato9rn7ToPNBnAJYzbJs3aCUJSteOVv7I-JSbGE2y9K4BsBp3NuN8oloRuXxX8be634F28fr4lBJevIojpsiwGHOHUbnKdYYZ95RHDohJL_Q16g4-L2SoBklkVgXDAMMXgth0ZshAna3_duMCC2U1S5pl-OCY6ll58ic1vqPtLdw5iE5_tCE9nDjcRFksDtHERk2I4PIuKnSeOSnEsFmH8MBmLtlN3BhbKVgMZTRS_ypRgeVaOqLhanCq6M6amI7Ain-n1-qImgAwY6aJ_QOLMKo6PU2-JmEwvyL8bHQ_Cg0l_5k6o-06EL_dnPHyjC3LrkHqpu-_MTIr2D8CbHKVXMGoyja_zPgoaj5R-9CbL5g_CSl5gKuvSHUWIXPSQT_wUA2qYzFNVbqHaowbWazkVTJdoGM", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b80cc5c-7d17-4c84-a75c-a2eda1dd931d", "record_id": "flaws_cloudtrail:0000291:9b80cc5c-7d17-4c84-a75c-a2eda1dd931d", "row_index": 291, "timestamp": "2019-08-21T13:40:29Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1934, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b80cc5c-7d17-4c84-a75c-a2eda1dd931d", "eventTime": "2019-08-21T13:40:29Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: je7OuO-F6AGCEOQzif97KW_Kmhfu_M24cENE9rv_ZsdFzEqY1_lPjvDQidxhqy_qyA6mvCc2VcoCuSo3kCIG9xqJoY7wqePwXq5IRXgm-6nIuLztP28svJumO1DN2zFGtnhfJK9wOSIn5d_7JvwK9Gh7aNXa17hsZ5jagPcvyUNAFspitOluzG6PdG64cDzeW0sldXbOcgsuBdE7vSvkTwS2BhIc63USttn02KAmQ3iGaOozYzkn0ZFMTTEnyp0Ato9rn7ToPNBnAJYzbJs3aCUJSteOVv7I-JSbGE2y9K4BsBp3NuN8oloRuXxX8be634F28fr4lBJevIojpsiwGHOHUbnKdYYZ95RHDohJL_Q16g4-L2SoBklkVgXDAMMXgth0ZshAna3_duMCC2U1S5pl-OCY6ll58ic1vqPtLdw5iE5_tCE9nDjcRFksDtHERk2I4PIuKnSeOSnEsFmH8MBmLtlN3BhbKVgMZTRS_ypRgeVaOqLhanCq6M6amI7Ain-n1-qImgAwY6aJ_QOLMKo6PU2-JmEwvyL8bHQ_Cg0l_5k6o-06EL_dnPHyjC3LrkHqpu-_MTIr2D8CbHKVXMGoyja_zPgoaj5R-9CbL5g_CSl5gKuvSHUWIXPSQT_wUA2qYzFNVbqHaowbWazkVTJdoGM", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d86479-491b-4ddf-848e-7d32ae798667", "record_id": "flaws_cloudtrail:0000292:9d86479-491b-4ddf-848e-7d32ae798667", "row_index": 292, "timestamp": "2019-08-21T13:40:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1932, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d86479-491b-4ddf-848e-7d32ae798667", "eventTime": "2019-08-21T13:40:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: gJqOgXly0sDxCOKZRWPp0jxqKPd5tsDtqsByGLEjeoLS48KukWqTSY-4NaUiTy4kNtVxqBpKZ7tsuV1Hr6l7rYqz9irdFX7ijMynTvXMl3Nc13WTOLDrs78fZOnRT6WnvmwT9BsT6UW018Qe96fmwSwP9WorjUVhjPffTRi0MQbO4Ug0U-7-Jd2nHK0jiyqlIYW365T59ic2xYOJelNDd9VQEYM3kUeYdqIlF4L76RLz4g6WvooXXKcmCSczYE5lcEL3HQdpI5W4bV4d8fgwh3nslrTX41GbBnVrAR0RYhOYM5jKlKbp3zbYdscC4Mcmze_fcU7HjDwHkKDikTWC-YmDr04cXzhtrilTy8YD9dNAHgEPmE56RRPNhiBhaQ3j29cYJaCnHrCvWvzI7um2PxJ7tgKbAFwWpF-0ucju84M6TM9om-5C5nHXhdbFUyzuKMMtVFMMVw8ySjs5M6ZpKwS3C7pHOolnq2oHm2IHQJquaCEE1zHzlr8pAwtJNc-wup-kSuhrdzJlooQB9FJwK5I--4JGmiwAhe1qXiUTYWIGbwXyDBREBoDoCwUwYSokIJGDLSCB1xxmS2mip0oVShd3G_wN0gh1wWpyazLNbc_qMBCgp_qfESz9KqVE6q6ZKYEnUjeVOWj7BqdkXZJinHqxdRQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d86479-491b-4ddf-848e-7d32ae798667", "record_id": "flaws_cloudtrail:0000293:9d86479-491b-4ddf-848e-7d32ae798667", "row_index": 293, "timestamp": "2019-08-21T13:40:30Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1932, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d86479-491b-4ddf-848e-7d32ae798667", "eventTime": "2019-08-21T13:40:30Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: gJqOgXly0sDxCOKZRWPp0jxqKPd5tsDtqsByGLEjeoLS48KukWqTSY-4NaUiTy4kNtVxqBpKZ7tsuV1Hr6l7rYqz9irdFX7ijMynTvXMl3Nc13WTOLDrs78fZOnRT6WnvmwT9BsT6UW018Qe96fmwSwP9WorjUVhjPffTRi0MQbO4Ug0U-7-Jd2nHK0jiyqlIYW365T59ic2xYOJelNDd9VQEYM3kUeYdqIlF4L76RLz4g6WvooXXKcmCSczYE5lcEL3HQdpI5W4bV4d8fgwh3nslrTX41GbBnVrAR0RYhOYM5jKlKbp3zbYdscC4Mcmze_fcU7HjDwHkKDikTWC-YmDr04cXzhtrilTy8YD9dNAHgEPmE56RRPNhiBhaQ3j29cYJaCnHrCvWvzI7um2PxJ7tgKbAFwWpF-0ucju84M6TM9om-5C5nHXhdbFUyzuKMMtVFMMVw8ySjs5M6ZpKwS3C7pHOolnq2oHm2IHQJquaCEE1zHzlr8pAwtJNc-wup-kSuhrdzJlooQB9FJwK5I--4JGmiwAhe1qXiUTYWIGbwXyDBREBoDoCwUwYSokIJGDLSCB1xxmS2mip0oVShd3G_wN0gh1wWpyazLNbc_qMBCgp_qfESz9KqVE6q6ZKYEnUjeVOWj7BqdkXZJinHqxdRQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b0b0c62-b40d-4ed8-bd5e-c4215ef3e082", "record_id": "flaws_cloudtrail:0000294:0b0b0c62-b40d-4ed8-bd5e-c4215ef3e082", "row_index": 294, "timestamp": "2019-08-21T13:40:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b0b0c62-b40d-4ed8-bd5e-c4215ef3e082", "eventTime": "2019-08-21T13:40:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: p_vH1G9vx4a_xkbbXs_e9UjJW3AyCr3UT6QmZ5O2gTlAnN1D_hP-KnOYWxzRJNGtnxYJwK5bIg3j2AJUD96qjQYsnIQWNZkf_rmrLVGon5fMYKfK6yURa8jGa67oCYLJ4Ko2pZJuZHTeG7MD67Yndo8PPUNVZhAk3dO-sA_iKoUdVuHK-UPnm0eT990doC89ElHaRTSNW_iDHN71ZmUVhEQ90vz3cwuDSDONs9Y9dDplp4XNDvkCkDSq9nwm9kTpvD1AW3q3Ep49rx8X4-f03l3WQmvDby1u5pnD-oj28MKhe9InlxFW85kQS2troCA4tUpvo4RpKK7bK0jsztXnHvdfcuB7fRbp4EM1BdnxY-l_1EhD-9GKPzzBCzzdohSbWcOeS__HadkNPB52Wkcd2eQCNSP7LZ_R0pkQpn9JFbums57UuWQCc1fjBsTjfL0mVnRF8ZThDE_Tx5GwVsF-arcQCQvsPCfNBHu5IeW7hdgOoWq167QBztR3XHB-NuhmG46GaaXxoUK3UDeJVwoBiWtVPzAwFntJxeZoKIs-0bvzj2hIu6XQH7POIfpWgZuPnemeK9y1r_9qbNyCFsIZiV4tZLx719vvAOcqIZxrnlQ3eWHNh-Y-W5mh8S-3c_WdbcnkKf8E-NTSavEmHhtV7b7rOHz13w", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b0b0c62-b40d-4ed8-bd5e-c4215ef3e082", "record_id": "flaws_cloudtrail:0000295:0b0b0c62-b40d-4ed8-bd5e-c4215ef3e082", "row_index": 295, "timestamp": "2019-08-21T13:40:31Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1936, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b0b0c62-b40d-4ed8-bd5e-c4215ef3e082", "eventTime": "2019-08-21T13:40:31Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: p_vH1G9vx4a_xkbbXs_e9UjJW3AyCr3UT6QmZ5O2gTlAnN1D_hP-KnOYWxzRJNGtnxYJwK5bIg3j2AJUD96qjQYsnIQWNZkf_rmrLVGon5fMYKfK6yURa8jGa67oCYLJ4Ko2pZJuZHTeG7MD67Yndo8PPUNVZhAk3dO-sA_iKoUdVuHK-UPnm0eT990doC89ElHaRTSNW_iDHN71ZmUVhEQ90vz3cwuDSDONs9Y9dDplp4XNDvkCkDSq9nwm9kTpvD1AW3q3Ep49rx8X4-f03l3WQmvDby1u5pnD-oj28MKhe9InlxFW85kQS2troCA4tUpvo4RpKK7bK0jsztXnHvdfcuB7fRbp4EM1BdnxY-l_1EhD-9GKPzzBCzzdohSbWcOeS__HadkNPB52Wkcd2eQCNSP7LZ_R0pkQpn9JFbums57UuWQCc1fjBsTjfL0mVnRF8ZThDE_Tx5GwVsF-arcQCQvsPCfNBHu5IeW7hdgOoWq167QBztR3XHB-NuhmG46GaaXxoUK3UDeJVwoBiWtVPzAwFntJxeZoKIs-0bvzj2hIu6XQH7POIfpWgZuPnemeK9y1r_9qbNyCFsIZiV4tZLx719vvAOcqIZxrnlQ3eWHNh-Y-W5mh8S-3c_WdbcnkKf8E-NTSavEmHhtV7b7rOHz13w", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aabf9c0a-4aac-47fe-bbbc-3b6d73208b9f", "record_id": "flaws_cloudtrail:0000296:aabf9c0a-4aac-47fe-bbbc-3b6d73208b9f", "row_index": 296, "timestamp": "2019-08-21T13:40:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aabf9c0a-4aac-47fe-bbbc-3b6d73208b9f", "eventTime": "2019-08-21T13:40:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GP7kuZVkgFnT6CXIml6xqURM-x7eWrC01-qlcl6YtzPQ_OYG_idxMGovIhY6z_YcQ8A5L-_IhMbGfgqhuP5nVK0cRx0eFzwRV_55SjezIhg5ZyP5p-VICD8fJg_QfYGy1wwwn5G8CSU6yDaqVlJEeyJffWOtwFYC_i1X8QiqaYckbDXn9ZfALJSwWwevmCnnksgYxTih_wNt_3PmuN0uHFsRWR8B7LAJwemwNZRAdkCHUvAfj3ho_9LONjay_Bd8fZvsScvgG0WcZ4M_xEbumFI-fd4Sc7boKzXIlxTFzf8uKrnz2_-zSQZZmOo1mOwjO1NLpNGLpotdaAr3T3RYsG9UKvJ7krKx5d3Ee2blieBX-x_zE6Rr2Pt8ozyV36fAct8o7_jitaypPA8MPxqlIUTgguddFvoG25RxWe-RKfUfV_0ZMe2EtRjHN-dOoDe7qz57_J0QC6ZNh1FgyPlogyj0RFCcNG9Ze05S_0rAW1-YRfLEnro1cvOwK8T3fBObWMUsA-Cil1SfUslWfyMkp8Qvjvt-ckGKi_32-By6Mt_R2BZNd539QRuYMjs7jHFKofPMQiQw2IVye2hNxjAEtiKUkgobXrPQgR7xCAfcWPkeUjNss3ANbsGmpJNc-uiXEMdKXmr5vrO6movR0Yn2XazFmFAz", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aabf9c0a-4aac-47fe-bbbc-3b6d73208b9f", "record_id": "flaws_cloudtrail:0000297:aabf9c0a-4aac-47fe-bbbc-3b6d73208b9f", "row_index": 297, "timestamp": "2019-08-21T13:40:33Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aabf9c0a-4aac-47fe-bbbc-3b6d73208b9f", "eventTime": "2019-08-21T13:40:33Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GP7kuZVkgFnT6CXIml6xqURM-x7eWrC01-qlcl6YtzPQ_OYG_idxMGovIhY6z_YcQ8A5L-_IhMbGfgqhuP5nVK0cRx0eFzwRV_55SjezIhg5ZyP5p-VICD8fJg_QfYGy1wwwn5G8CSU6yDaqVlJEeyJffWOtwFYC_i1X8QiqaYckbDXn9ZfALJSwWwevmCnnksgYxTih_wNt_3PmuN0uHFsRWR8B7LAJwemwNZRAdkCHUvAfj3ho_9LONjay_Bd8fZvsScvgG0WcZ4M_xEbumFI-fd4Sc7boKzXIlxTFzf8uKrnz2_-zSQZZmOo1mOwjO1NLpNGLpotdaAr3T3RYsG9UKvJ7krKx5d3Ee2blieBX-x_zE6Rr2Pt8ozyV36fAct8o7_jitaypPA8MPxqlIUTgguddFvoG25RxWe-RKfUfV_0ZMe2EtRjHN-dOoDe7qz57_J0QC6ZNh1FgyPlogyj0RFCcNG9Ze05S_0rAW1-YRfLEnro1cvOwK8T3fBObWMUsA-Cil1SfUslWfyMkp8Qvjvt-ckGKi_32-By6Mt_R2BZNd539QRuYMjs7jHFKofPMQiQw2IVye2hNxjAEtiKUkgobXrPQgR7xCAfcWPkeUjNss3ANbsGmpJNc-uiXEMdKXmr5vrO6movR0Yn2XazFmFAz", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e22978-d4b9-4938-b49f-4ef0a8ff47ee", "record_id": "flaws_cloudtrail:0000298:3e22978-d4b9-4938-b49f-4ef0a8ff47ee", "row_index": 298, "timestamp": "2019-08-21T13:40:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e22978-d4b9-4938-b49f-4ef0a8ff47ee", "eventTime": "2019-08-21T13:40:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e22978-d4b9-4938-b49f-4ef0a8ff47ee", "record_id": "flaws_cloudtrail:0000299:3e22978-d4b9-4938-b49f-4ef0a8ff47ee", "row_index": 299, "timestamp": "2019-08-21T13:40:34Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1281, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e22978-d4b9-4938-b49f-4ef0a8ff47ee", "eventTime": "2019-08-21T13:40:34Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "c3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2da4d6f0-a9e4-44c3-8543-3e247308b7354", "record_id": "flaws_cloudtrail:0000300:2da4d6f0-a9e4-44c3-8543-3e247308b7354", "row_index": 300, "timestamp": "2019-08-21T13:40:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2da4d6f0-a9e4-44c3-8543-3e247308b7354", "eventTime": "2019-08-21T13:40:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YMEyN5KOfYY2KaFjLRsxJjkm0qgevB1JT3yY317IIzFR40XyhiV-JjcrjnDfjWen5NrMBNtgbObx8hvWRpuLeAJ_pCjCc-nAfrt-vkFc8XM9Fu-JdMs78g0Ygw94GFmYnbW51K_FtJpBUvBriBjgk-fK0WYd35Cj3aw1q7KpVozVIcBmrKJnVVa0fnYknhtvkdKhxzWbccyAJ27M0RTXW0P78GqOb4b_wNjL51kPnsPe95bFFiRHVuaaGmNWqABD0iNOyLarX7Ej63NVm87mKbk7uqD0r4X-GU13-AkYFoldyMHW-R8lM6-NDLAmpQ3079Mnj0k5zUlVYB7uK5KKxDvNxfDodrepCsLaonkFUjhDi041cTcYXoEqpVn2q2sdmvPm4oJ5GcTIhQMcIjuQVldZMfL9UXNW1D_ldzHXeHEn7aSXax0wrBxnkBWfHx6ET3yhTjfl67xObWFXl0i6tmTYjcsmBOqvVHDcFfPCuUJDDGd5_Sq7kV7MUueLbKqDRDgcEelwQ6GK1UOJvKzkFCcJDmPE4jNm-Fp4H1-KqmqJprPBdD8XGCpmI18ATfi51_Tr-qp1aw6Jc-XKADmK9YxUE3HygFemuCb8i6l5nDGa4i8oO3uRr4k0cci5fEJLG-xbqsmMGoDpFyWPOXzcBTbW7_98", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2da4d6f0-a9e4-44c3-8543-3e247308b7354", "record_id": "flaws_cloudtrail:0000301:2da4d6f0-a9e4-44c3-8543-3e247308b7354", "row_index": 301, "timestamp": "2019-08-21T13:40:47Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2da4d6f0-a9e4-44c3-8543-3e247308b7354", "eventTime": "2019-08-21T13:40:47Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: YMEyN5KOfYY2KaFjLRsxJjkm0qgevB1JT3yY317IIzFR40XyhiV-JjcrjnDfjWen5NrMBNtgbObx8hvWRpuLeAJ_pCjCc-nAfrt-vkFc8XM9Fu-JdMs78g0Ygw94GFmYnbW51K_FtJpBUvBriBjgk-fK0WYd35Cj3aw1q7KpVozVIcBmrKJnVVa0fnYknhtvkdKhxzWbccyAJ27M0RTXW0P78GqOb4b_wNjL51kPnsPe95bFFiRHVuaaGmNWqABD0iNOyLarX7Ej63NVm87mKbk7uqD0r4X-GU13-AkYFoldyMHW-R8lM6-NDLAmpQ3079Mnj0k5zUlVYB7uK5KKxDvNxfDodrepCsLaonkFUjhDi041cTcYXoEqpVn2q2sdmvPm4oJ5GcTIhQMcIjuQVldZMfL9UXNW1D_ldzHXeHEn7aSXax0wrBxnkBWfHx6ET3yhTjfl67xObWFXl0i6tmTYjcsmBOqvVHDcFfPCuUJDDGd5_Sq7kV7MUueLbKqDRDgcEelwQ6GK1UOJvKzkFCcJDmPE4jNm-Fp4H1-KqmqJprPBdD8XGCpmI18ATfi51_Tr-qp1aw6Jc-XKADmK9YxUE3HygFemuCb8i6l5nDGa4i8oO3uRr4k0cci5fEJLG-xbqsmMGoDpFyWPOXzcBTbW7_98", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "094069fd-dcc9-430d-94b6-ce39de27e60a", "record_id": "flaws_cloudtrail:0000302:094069fd-dcc9-430d-94b6-ce39de27e60a", "row_index": 302, "timestamp": "2019-08-21T13:40:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "094069fd-dcc9-430d-94b6-ce39de27e60a", "eventTime": "2019-08-21T13:40:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HhOmFVfN5hkyvo1vdLHfhWbLMMbXARt0ZIO9zjgKgN4iGSvcZnhYcCQXDRQUKJ7Vxk1ZRRxI1XaJiiqF8jk9G1_EG4NLmrEjk0YdsbI07ODXztsNoIXFqBhXz_TIu3lzhOtt5IeH-ffYnvJNm5WnGW1vG7_9WCETRRbAhT9TYocnPl6iDpCoIjifQmSSrC963O6ckHNfgs940VbddU0F54iXNcyrzBF4NE2NZvBiLED90bd5hrH_o3OkhVEPU62EIeUpUGMRmy6gHQU61iXF2Kn-uBH_wlFg2QEpXWCNBaH2tPJ4JOfd2Fsq-pPKwZIRVQ9eJfDBcFA4kChhG8tMGZNuhSkT04uM9tTTcoDDuBveYhs03dXhCJCxBFufe7AXBUmeUA9phvHjdvWtToGkaZzl26f7MzSBbLM5wSvieZm1xU6h0X1X0UkzT5HA0sdBHsHO_F5bHZ5bh5lbqzdgRIELM8dVFChKVIDAHTWtc23Ik3Ogr8ol7bJyQgah9NdTalRwx5WD5TFSmF5kY6Xjnriq_WwHVywbFqkbyTP9XSEweGv0yYtTtj3jJJtzyuz0X2_0j7Ohyta7fxLxRErz6hvNPWmLj854TkATvVj6HxwdXtHxuuxSDBbNqcRZWZX17ojitmnzjHLsjSvbjb3j9O8L-sfS6Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "391960e58-df42-46c5-86d6-e92970d1bcad", "record_id": "flaws_cloudtrail:0000303:391960e58-df42-46c5-86d6-e92970d1bcad", "row_index": 303, "timestamp": "2019-08-21T13:40:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "391960e58-df42-46c5-86d6-e92970d1bcad", "eventTime": "2019-08-21T13:40:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "094069fd-dcc9-430d-94b6-ce39de27e60a", "record_id": "flaws_cloudtrail:0000304:094069fd-dcc9-430d-94b6-ce39de27e60a", "row_index": 304, "timestamp": "2019-08-21T13:40:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1935, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "094069fd-dcc9-430d-94b6-ce39de27e60a", "eventTime": "2019-08-21T13:40:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: HhOmFVfN5hkyvo1vdLHfhWbLMMbXARt0ZIO9zjgKgN4iGSvcZnhYcCQXDRQUKJ7Vxk1ZRRxI1XaJiiqF8jk9G1_EG4NLmrEjk0YdsbI07ODXztsNoIXFqBhXz_TIu3lzhOtt5IeH-ffYnvJNm5WnGW1vG7_9WCETRRbAhT9TYocnPl6iDpCoIjifQmSSrC963O6ckHNfgs940VbddU0F54iXNcyrzBF4NE2NZvBiLED90bd5hrH_o3OkhVEPU62EIeUpUGMRmy6gHQU61iXF2Kn-uBH_wlFg2QEpXWCNBaH2tPJ4JOfd2Fsq-pPKwZIRVQ9eJfDBcFA4kChhG8tMGZNuhSkT04uM9tTTcoDDuBveYhs03dXhCJCxBFufe7AXBUmeUA9phvHjdvWtToGkaZzl26f7MzSBbLM5wSvieZm1xU6h0X1X0UkzT5HA0sdBHsHO_F5bHZ5bh5lbqzdgRIELM8dVFChKVIDAHTWtc23Ik3Ogr8ol7bJyQgah9NdTalRwx5WD5TFSmF5kY6Xjnriq_WwHVywbFqkbyTP9XSEweGv0yYtTtj3jJJtzyuz0X2_0j7Ohyta7fxLxRErz6hvNPWmLj854TkATvVj6HxwdXtHxuuxSDBbNqcRZWZX17ojitmnzjHLsjSvbjb3j9O8L-sfS6Q", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "391960e58-df42-46c5-86d6-e92970d1bcad", "record_id": "flaws_cloudtrail:0000305:391960e58-df42-46c5-86d6-e92970d1bcad", "row_index": 305, "timestamp": "2019-08-21T13:40:48Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "391960e58-df42-46c5-86d6-e92970d1bcad", "eventTime": "2019-08-21T13:40:48Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cf412ad-db48-4f9f-b511-5cf9873a2ade", "record_id": "flaws_cloudtrail:0000306:0cf412ad-db48-4f9f-b511-5cf9873a2ade", "row_index": 306, "timestamp": "2019-08-21T13:40:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cf412ad-db48-4f9f-b511-5cf9873a2ade", "eventTime": "2019-08-21T13:40:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: r6pgFw3N2i6cKFpPLKpmtKQ6fwX-pCR5_507rIc837MLmP0DofWXl2K9UXqG1ZoP4cb5leIXoTIpYt5pFzZ1NjB0BkIrGYZ24DSl6KaGCO3CxwpZ4yRdTGh7lxi4A_5gzr4UWbAFivnKSCSJrV_SzYUfFVPQULHQIOD62pMS0ksvfnqIfg3onD3Gg_wBNfP2-gPEhIBZz6tUM4sr1Ok9144jjAqiwakU4vIltPpN3CSeTH7g0WKf22cYuxUy_8ar24fXvB3g8ZV1Id1GYT9DEntEbWL7wekrieoDYPTLryA4J2XuSBrgzKybE-7c8-wFCzMogXAhuZRwMSdcEoqzSYBK72Po6SWMPzSFONTp6TuGrBzNscXSR4dBG8iEyQq_nFK2iqoxl03cRu-ML-96Oq0Cw85127a23jkhTxQUksOt_leNJMT0kW6aijamNITurET4skx-K78t2C4digF8qWJCUjRgRcEnPU8E8kNyouWqJv3B_GMKH3LMdRroQkgmnX55CGq1Lw2K2GvngaHG2wBNdmaHN82H70TqtByG-0kLhzx71dlnQPs6IDpK-YHh2wdRFZX-p3QTdhOkL1if6D32MJ9UDvVrpKE-nBTZ8mYmEqbLxXHUtgw2yWkKviiUcrRrlAu4_gV7HzvejKH8szOt-7Ml", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0cf412ad-db48-4f9f-b511-5cf9873a2ade", "record_id": "flaws_cloudtrail:0000307:0cf412ad-db48-4f9f-b511-5cf9873a2ade", "row_index": 307, "timestamp": "2019-08-21T13:40:51Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1933, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0cf412ad-db48-4f9f-b511-5cf9873a2ade", "eventTime": "2019-08-21T13:40:51Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: r6pgFw3N2i6cKFpPLKpmtKQ6fwX-pCR5_507rIc837MLmP0DofWXl2K9UXqG1ZoP4cb5leIXoTIpYt5pFzZ1NjB0BkIrGYZ24DSl6KaGCO3CxwpZ4yRdTGh7lxi4A_5gzr4UWbAFivnKSCSJrV_SzYUfFVPQULHQIOD62pMS0ksvfnqIfg3onD3Gg_wBNfP2-gPEhIBZz6tUM4sr1Ok9144jjAqiwakU4vIltPpN3CSeTH7g0WKf22cYuxUy_8ar24fXvB3g8ZV1Id1GYT9DEntEbWL7wekrieoDYPTLryA4J2XuSBrgzKybE-7c8-wFCzMogXAhuZRwMSdcEoqzSYBK72Po6SWMPzSFONTp6TuGrBzNscXSR4dBG8iEyQq_nFK2iqoxl03cRu-ML-96Oq0Cw85127a23jkhTxQUksOt_leNJMT0kW6aijamNITurET4skx-K78t2C4digF8qWJCUjRgRcEnPU8E8kNyouWqJv3B_GMKH3LMdRroQkgmnX55CGq1Lw2K2GvngaHG2wBNdmaHN82H70TqtByG-0kLhzx71dlnQPs6IDpK-YHh2wdRFZX-p3QTdhOkL1if6D32MJ9UDvVrpKE-nBTZ8mYmEqbLxXHUtgw2yWkKviiUcrRrlAu4_gV7HzvejKH8szOt-7Ml", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m4.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e46fba03-20ed-4660-b64f-a9c58421c82d", "record_id": "flaws_cloudtrail:0000308:e46fba03-20ed-4660-b64f-a9c58421c82d", "row_index": 308, "timestamp": "2019-08-21T13:40:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e46fba03-20ed-4660-b64f-a9c58421c82d", "eventTime": "2019-08-21T13:40:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e46fba03-20ed-4660-b64f-a9c58421c82d", "record_id": "flaws_cloudtrail:0000309:e46fba03-20ed-4660-b64f-a9c58421c82d", "row_index": 309, "timestamp": "2019-08-21T13:40:52Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1283, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e46fba03-20ed-4660-b64f-a9c58421c82d", "eventTime": "2019-08-21T13:40:52Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "r3.large", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "103d4f36-87ca-4616-ab9d-523f550b9539", "record_id": "flaws_cloudtrail:0000310:103d4f36-87ca-4616-ab9d-523f550b9539", "row_index": 310, "timestamp": "2019-08-21T13:40:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "103d4f36-87ca-4616-ab9d-523f550b9539", "eventTime": "2019-08-21T13:40:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "103d4f36-87ca-4616-ab9d-523f550b9539", "record_id": "flaws_cloudtrail:0000311:103d4f36-87ca-4616-ab9d-523f550b9539", "row_index": 311, "timestamp": "2019-08-21T13:40:55Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1284, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "103d4f36-87ca-4616-ab9d-523f550b9539", "eventTime": "2019-08-21T13:40:55Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "eu-west-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-fb2f2b2b9bed8bad8", "minCount": 1, "maxCount": 10}]}, "instanceType": "m3.medium", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c78c62dc-46fa-46f5-b435-bce3794657b6", "record_id": "flaws_cloudtrail:0000312:c78c62dc-46fa-46f5-b435-bce3794657b6", "row_index": 312, "timestamp": "2019-08-21T13:41:19Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3428"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c78c62dc-46fa-46f5-b435-bce3794657b6", "eventTime": "2019-08-21T13:41:19Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3428", "key": "customer/00032.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3428"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "743a2d99-f3fe-401f-82f9-f057aa4e03cc", "record_id": "flaws_cloudtrail:0000313:743a2d99-f3fe-401f-82f9-f057aa4e03cc", "row_index": 313, "timestamp": "2019-08-21T13:41:44Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3428"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "743a2d99-f3fe-401f-82f9-f057aa4e03cc", "eventTime": "2019-08-21T13:41:44Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3428", "key": "customer/00800.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3428"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b039235-7316-4e32-acdc-8ea771668524", "record_id": "flaws_cloudtrail:0000314:5b039235-7316-4e32-acdc-8ea771668524", "row_index": 314, "timestamp": "2019-08-21T13:42:27Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3428"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b039235-7316-4e32-acdc-8ea771668524", "eventTime": "2019-08-21T13:42:27Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3428", "key": "customer/06448.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3428"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a577e494-471e-402b-9b87-a3cff3e201d5", "record_id": "flaws_cloudtrail:0000315:a577e494-471e-402b-9b87-a3cff3e201d5", "row_index": 315, "timestamp": "2019-08-21T13:42:50Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3428"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a577e494-471e-402b-9b87-a3cff3e201d5", "eventTime": "2019-08-21T13:42:50Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3428", "key": "customer/05437.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3428"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b45b221-1c61-44a9-8294-0ba984bbefc4", "record_id": "flaws_cloudtrail:0000316:0b45b221-1c61-44a9-8294-0ba984bbefc4", "row_index": 316, "timestamp": "2019-08-21T13:43:42Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA97CJ66VHH7K407F8", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "161.119.202.137", "user_agent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "aws_region": "eu-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-3428"], "raw_record_size_bytes": 638, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b45b221-1c61-44a9-8294-0ba984bbefc4", "eventTime": "2019-08-21T13:43:42Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.119.202.137", "userAgent": "Boto3/1.18.4 Python/3.9.6 Linux/5.10.0-8-amd64 Botocore/1.21.4", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA97CJ66VHH7K407F8", "userName": "Level6"}, "requestParameters": {"bucketName": "prod-data-3428", "key": "customer/03476.json"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-3428"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "826fc158-e550-4d08-982a-a0af42b0930b", "record_id": "flaws_cloudtrail:0000317:826fc158-e550-4d08-982a-a0af42b0930b", "row_index": 317, "timestamp": "2019-08-21T13:45:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "826fc158-e550-4d08-982a-a0af42b0930b", "eventTime": "2019-08-21T13:45:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "826fc158-e550-4d08-982a-a0af42b0930b", "record_id": "flaws_cloudtrail:0000318:826fc158-e550-4d08-982a-a0af42b0930b", "row_index": 318, "timestamp": "2019-08-21T13:45:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "826fc158-e550-4d08-982a-a0af42b0930b", "eventTime": "2019-08-21T13:45:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb9f3fa6-838b-4f2b-bc36-871150f2e5b6e", "record_id": "flaws_cloudtrail:0000319:bb9f3fa6-838b-4f2b-bc36-871150f2e5b6e", "row_index": 319, "timestamp": "2019-08-21T13:45:59Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb9f3fa6-838b-4f2b-bc36-871150f2e5b6e", "eventTime": "2019-08-21T13:45:59Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab96b30-85b4-4a95-9170-290d9204eba4", "record_id": "flaws_cloudtrail:0000320:4ab96b30-85b4-4a95-9170-290d9204eba4", "row_index": 320, "timestamp": "2019-08-21T13:45:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab96b30-85b4-4a95-9170-290d9204eba4", "eventTime": "2019-08-21T13:45:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb9f3fa6-838b-4f2b-bc36-871150f2e5b6e", "record_id": "flaws_cloudtrail:0000321:bb9f3fa6-838b-4f2b-bc36-871150f2e5b6e", "row_index": 321, "timestamp": "2019-08-21T13:45:59Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb9f3fa6-838b-4f2b-bc36-871150f2e5b6e", "eventTime": "2019-08-21T13:45:59Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab96b30-85b4-4a95-9170-290d9204eba4", "record_id": "flaws_cloudtrail:0000322:4ab96b30-85b4-4a95-9170-290d9204eba4", "row_index": 322, "timestamp": "2019-08-21T13:45:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab96b30-85b4-4a95-9170-290d9204eba4", "eventTime": "2019-08-21T13:45:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14b327130-d238-4c34-9c57-1f161917e5e9c", "record_id": "flaws_cloudtrail:0000323:14b327130-d238-4c34-9c57-1f161917e5e9c", "row_index": 323, "timestamp": "2019-08-21T13:46:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14b327130-d238-4c34-9c57-1f161917e5e9c", "eventTime": "2019-08-21T13:46:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14b327130-d238-4c34-9c57-1f161917e5e9c", "record_id": "flaws_cloudtrail:0000324:14b327130-d238-4c34-9c57-1f161917e5e9c", "row_index": 324, "timestamp": "2019-08-21T13:46:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14b327130-d238-4c34-9c57-1f161917e5e9c", "eventTime": "2019-08-21T13:46:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4794ce5-5193-466a-bc76-52d9e372ef88", "record_id": "flaws_cloudtrail:0000325:b4794ce5-5193-466a-bc76-52d9e372ef88", "row_index": 325, "timestamp": "2019-08-21T13:46:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4794ce5-5193-466a-bc76-52d9e372ef88", "eventTime": "2019-08-21T13:46:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4794ce5-5193-466a-bc76-52d9e372ef88", "record_id": "flaws_cloudtrail:0000326:b4794ce5-5193-466a-bc76-52d9e372ef88", "row_index": 326, "timestamp": "2019-08-21T13:46:02Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4794ce5-5193-466a-bc76-52d9e372ef88", "eventTime": "2019-08-21T13:46:02Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccf1d59d-039d-44ea-a1a9-7cbf04021fb1", "record_id": "flaws_cloudtrail:0000327:ccf1d59d-039d-44ea-a1a9-7cbf04021fb1", "row_index": 327, "timestamp": "2019-08-21T13:46:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccf1d59d-039d-44ea-a1a9-7cbf04021fb1", "eventTime": "2019-08-21T13:46:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccf1d59d-039d-44ea-a1a9-7cbf04021fb1", "record_id": "flaws_cloudtrail:0000328:ccf1d59d-039d-44ea-a1a9-7cbf04021fb1", "row_index": 328, "timestamp": "2019-08-21T13:46:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccf1d59d-039d-44ea-a1a9-7cbf04021fb1", "eventTime": "2019-08-21T13:46:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02386a-23cc-4a25-9bd0-c3481cf8574e", "record_id": "flaws_cloudtrail:0000329:02386a-23cc-4a25-9bd0-c3481cf8574e", "row_index": 329, "timestamp": "2019-08-21T13:46:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02386a-23cc-4a25-9bd0-c3481cf8574e", "eventTime": "2019-08-21T13:46:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02386a-23cc-4a25-9bd0-c3481cf8574e", "record_id": "flaws_cloudtrail:0000330:02386a-23cc-4a25-9bd0-c3481cf8574e", "row_index": 330, "timestamp": "2019-08-21T13:46:05Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02386a-23cc-4a25-9bd0-c3481cf8574e", "eventTime": "2019-08-21T13:46:05Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4df88af-e65b-466c-8767-1b8b247522", "record_id": "flaws_cloudtrail:0000331:b4df88af-e65b-466c-8767-1b8b247522", "row_index": 331, "timestamp": "2019-08-21T13:46:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4df88af-e65b-466c-8767-1b8b247522", "eventTime": "2019-08-21T13:46:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4df88af-e65b-466c-8767-1b8b247522", "record_id": "flaws_cloudtrail:0000332:b4df88af-e65b-466c-8767-1b8b247522", "row_index": 332, "timestamp": "2019-08-21T13:46:07Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4df88af-e65b-466c-8767-1b8b247522", "eventTime": "2019-08-21T13:46:07Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aca41a2e-8aa5-4eea-979a-d5cead424588", "record_id": "flaws_cloudtrail:0000333:aca41a2e-8aa5-4eea-979a-d5cead424588", "row_index": 333, "timestamp": "2019-08-21T13:47:06Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aca41a2e-8aa5-4eea-979a-d5cead424588", "eventTime": "2019-08-21T13:47:06Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea0a6f7-2129-4c9e-810d-0d463e3db88a", "record_id": "flaws_cloudtrail:0000334:6ea0a6f7-2129-4c9e-810d-0d463e3db88a", "row_index": 334, "timestamp": "2019-08-21T13:47:06Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea0a6f7-2129-4c9e-810d-0d463e3db88a", "eventTime": "2019-08-21T13:47:06Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48dc65ec-5a12-492f-9b6b-247378e58826", "record_id": "flaws_cloudtrail:0000335:48dc65ec-5a12-492f-9b6b-247378e58826", "row_index": 335, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48dc65ec-5a12-492f-9b6b-247378e58826", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e94c7af3-1e76-4d1d-b45f-e560f42cd632", "record_id": "flaws_cloudtrail:0000336:e94c7af3-1e76-4d1d-b45f-e560f42cd632", "row_index": 336, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e94c7af3-1e76-4d1d-b45f-e560f42cd632", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "035d4346-33da-40fd-bcca-64b42507a21f", "record_id": "flaws_cloudtrail:0000337:035d4346-33da-40fd-bcca-64b42507a21f", "row_index": 337, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "035d4346-33da-40fd-bcca-64b42507a21f", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5961eead-c7a9-44e8-80cd-3c42417368ed", "record_id": "flaws_cloudtrail:0000338:5961eead-c7a9-44e8-80cd-3c42417368ed", "row_index": 338, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5961eead-c7a9-44e8-80cd-3c42417368ed", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4693c679-3846-4ccb-9b88-d8ca15795a2", "record_id": "flaws_cloudtrail:0000339:4693c679-3846-4ccb-9b88-d8ca15795a2", "row_index": 339, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4693c679-3846-4ccb-9b88-d8ca15795a2", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96c1d165-0521-40ab-8856-47b768cb6d3e", "record_id": "flaws_cloudtrail:0000340:96c1d165-0521-40ab-8856-47b768cb6d3e", "row_index": 340, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96c1d165-0521-40ab-8856-47b768cb6d3e", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b299f2a4-9a24-43f9-aff4-6263aff6fcc8", "record_id": "flaws_cloudtrail:0000341:b299f2a4-9a24-43f9-aff4-6263aff6fcc8", "row_index": 341, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b299f2a4-9a24-43f9-aff4-6263aff6fcc8", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb51bb7d-071d-43fb-811b-e84bf6efad4b", "record_id": "flaws_cloudtrail:0000342:cb51bb7d-071d-43fb-811b-e84bf6efad4b", "row_index": 342, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb51bb7d-071d-43fb-811b-e84bf6efad4b", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aca41a2e-8aa5-4eea-979a-d5cead424588", "record_id": "flaws_cloudtrail:0000343:aca41a2e-8aa5-4eea-979a-d5cead424588", "row_index": 343, "timestamp": "2019-08-21T13:47:06Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aca41a2e-8aa5-4eea-979a-d5cead424588", "eventTime": "2019-08-21T13:47:06Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ea0a6f7-2129-4c9e-810d-0d463e3db88a", "record_id": "flaws_cloudtrail:0000344:6ea0a6f7-2129-4c9e-810d-0d463e3db88a", "row_index": 344, "timestamp": "2019-08-21T13:47:06Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ea0a6f7-2129-4c9e-810d-0d463e3db88a", "eventTime": "2019-08-21T13:47:06Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48dc65ec-5a12-492f-9b6b-247378e58826", "record_id": "flaws_cloudtrail:0000345:48dc65ec-5a12-492f-9b6b-247378e58826", "row_index": 345, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48dc65ec-5a12-492f-9b6b-247378e58826", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e94c7af3-1e76-4d1d-b45f-e560f42cd632", "record_id": "flaws_cloudtrail:0000346:e94c7af3-1e76-4d1d-b45f-e560f42cd632", "row_index": 346, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e94c7af3-1e76-4d1d-b45f-e560f42cd632", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "035d4346-33da-40fd-bcca-64b42507a21f", "record_id": "flaws_cloudtrail:0000347:035d4346-33da-40fd-bcca-64b42507a21f", "row_index": 347, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "035d4346-33da-40fd-bcca-64b42507a21f", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5961eead-c7a9-44e8-80cd-3c42417368ed", "record_id": "flaws_cloudtrail:0000348:5961eead-c7a9-44e8-80cd-3c42417368ed", "row_index": 348, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5961eead-c7a9-44e8-80cd-3c42417368ed", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4693c679-3846-4ccb-9b88-d8ca15795a2", "record_id": "flaws_cloudtrail:0000349:4693c679-3846-4ccb-9b88-d8ca15795a2", "row_index": 349, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4693c679-3846-4ccb-9b88-d8ca15795a2", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96c1d165-0521-40ab-8856-47b768cb6d3e", "record_id": "flaws_cloudtrail:0000350:96c1d165-0521-40ab-8856-47b768cb6d3e", "row_index": 350, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96c1d165-0521-40ab-8856-47b768cb6d3e", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b299f2a4-9a24-43f9-aff4-6263aff6fcc8", "record_id": "flaws_cloudtrail:0000351:b299f2a4-9a24-43f9-aff4-6263aff6fcc8", "row_index": 351, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b299f2a4-9a24-43f9-aff4-6263aff6fcc8", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb51bb7d-071d-43fb-811b-e84bf6efad4b", "record_id": "flaws_cloudtrail:0000352:cb51bb7d-071d-43fb-811b-e84bf6efad4b", "row_index": 352, "timestamp": "2019-08-21T13:47:06Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb51bb7d-071d-43fb-811b-e84bf6efad4b", "eventTime": "2019-08-21T13:47:06Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca3489b8-a4af-49b9-9fb6-64c30406d2c", "record_id": "flaws_cloudtrail:0000353:ca3489b8-a4af-49b9-9fb6-64c30406d2c", "row_index": 353, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca3489b8-a4af-49b9-9fb6-64c30406d2c", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e89f68-6137-4de3-b9d6-3a31b9cdc8ce", "record_id": "flaws_cloudtrail:0000354:39e89f68-6137-4de3-b9d6-3a31b9cdc8ce", "row_index": 354, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e89f68-6137-4de3-b9d6-3a31b9cdc8ce", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b490e0e-fd32-49a6-849d-f8257b2e39cb", "record_id": "flaws_cloudtrail:0000355:9b490e0e-fd32-49a6-849d-f8257b2e39cb", "row_index": 355, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b490e0e-fd32-49a6-849d-f8257b2e39cb", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a92a88-e827-48b0-9b88-ae2e662842bd5", "record_id": "flaws_cloudtrail:0000356:c5a92a88-e827-48b0-9b88-ae2e662842bd5", "row_index": 356, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a92a88-e827-48b0-9b88-ae2e662842bd5", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2af57711-265c-43c3-8713-337e8c43268", "record_id": "flaws_cloudtrail:0000357:2af57711-265c-43c3-8713-337e8c43268", "row_index": 357, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2af57711-265c-43c3-8713-337e8c43268", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efb567769-32a2-4312-b0f3-946159db", "record_id": "flaws_cloudtrail:0000358:efb567769-32a2-4312-b0f3-946159db", "row_index": 358, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efb567769-32a2-4312-b0f3-946159db", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7605a412-59c1-4dc9-b862-e162bada24a6", "record_id": "flaws_cloudtrail:0000359:7605a412-59c1-4dc9-b862-e162bada24a6", "row_index": 359, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7605a412-59c1-4dc9-b862-e162bada24a6", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2706e97-49ec-4505-a17b-759f5db78ded", "record_id": "flaws_cloudtrail:0000360:b2706e97-49ec-4505-a17b-759f5db78ded", "row_index": 360, "timestamp": "2019-08-21T13:47:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2706e97-49ec-4505-a17b-759f5db78ded", "eventTime": "2019-08-21T13:47:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e36e5a-7016-445c-b976-6a143030e55e", "record_id": "flaws_cloudtrail:0000361:39e36e5a-7016-445c-b976-6a143030e55e", "row_index": 361, "timestamp": "2019-08-21T13:47:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e36e5a-7016-445c-b976-6a143030e55e", "eventTime": "2019-08-21T13:47:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33703ee-0ddc-4339-928c-541bfa547ede", "record_id": "flaws_cloudtrail:0000362:33703ee-0ddc-4339-928c-541bfa547ede", "row_index": 362, "timestamp": "2019-08-21T13:47:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33703ee-0ddc-4339-928c-541bfa547ede", "eventTime": "2019-08-21T13:47:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddf621847-a864-4b35-be5f-455018e76a58", "record_id": "flaws_cloudtrail:0000363:ddf621847-a864-4b35-be5f-455018e76a58", "row_index": 363, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddf621847-a864-4b35-be5f-455018e76a58", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa6205be-0466-4246-8ad6-0bfbd47df527", "record_id": "flaws_cloudtrail:0000364:fa6205be-0466-4246-8ad6-0bfbd47df527", "row_index": 364, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa6205be-0466-4246-8ad6-0bfbd47df527", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7101bea6-8b38-4979-9b46-86c988cdd870", "record_id": "flaws_cloudtrail:0000365:7101bea6-8b38-4979-9b46-86c988cdd870", "row_index": 365, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7101bea6-8b38-4979-9b46-86c988cdd870", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82cb2ed3-fd4d-4ece-8e1c-7e604996fcba", "record_id": "flaws_cloudtrail:0000366:82cb2ed3-fd4d-4ece-8e1c-7e604996fcba", "row_index": 366, "timestamp": "2019-08-21T13:47:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82cb2ed3-fd4d-4ece-8e1c-7e604996fcba", "eventTime": "2019-08-21T13:47:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca3489b8-a4af-49b9-9fb6-64c30406d2c", "record_id": "flaws_cloudtrail:0000367:ca3489b8-a4af-49b9-9fb6-64c30406d2c", "row_index": 367, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca3489b8-a4af-49b9-9fb6-64c30406d2c", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e89f68-6137-4de3-b9d6-3a31b9cdc8ce", "record_id": "flaws_cloudtrail:0000368:39e89f68-6137-4de3-b9d6-3a31b9cdc8ce", "row_index": 368, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e89f68-6137-4de3-b9d6-3a31b9cdc8ce", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b490e0e-fd32-49a6-849d-f8257b2e39cb", "record_id": "flaws_cloudtrail:0000369:9b490e0e-fd32-49a6-849d-f8257b2e39cb", "row_index": 369, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b490e0e-fd32-49a6-849d-f8257b2e39cb", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5a92a88-e827-48b0-9b88-ae2e662842bd5", "record_id": "flaws_cloudtrail:0000370:c5a92a88-e827-48b0-9b88-ae2e662842bd5", "row_index": 370, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5a92a88-e827-48b0-9b88-ae2e662842bd5", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2af57711-265c-43c3-8713-337e8c43268", "record_id": "flaws_cloudtrail:0000371:2af57711-265c-43c3-8713-337e8c43268", "row_index": 371, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2af57711-265c-43c3-8713-337e8c43268", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efb567769-32a2-4312-b0f3-946159db", "record_id": "flaws_cloudtrail:0000372:efb567769-32a2-4312-b0f3-946159db", "row_index": 372, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efb567769-32a2-4312-b0f3-946159db", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7605a412-59c1-4dc9-b862-e162bada24a6", "record_id": "flaws_cloudtrail:0000373:7605a412-59c1-4dc9-b862-e162bada24a6", "row_index": 373, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7605a412-59c1-4dc9-b862-e162bada24a6", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2706e97-49ec-4505-a17b-759f5db78ded", "record_id": "flaws_cloudtrail:0000374:b2706e97-49ec-4505-a17b-759f5db78ded", "row_index": 374, "timestamp": "2019-08-21T13:47:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2706e97-49ec-4505-a17b-759f5db78ded", "eventTime": "2019-08-21T13:47:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39e36e5a-7016-445c-b976-6a143030e55e", "record_id": "flaws_cloudtrail:0000375:39e36e5a-7016-445c-b976-6a143030e55e", "row_index": 375, "timestamp": "2019-08-21T13:47:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39e36e5a-7016-445c-b976-6a143030e55e", "eventTime": "2019-08-21T13:47:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33703ee-0ddc-4339-928c-541bfa547ede", "record_id": "flaws_cloudtrail:0000376:33703ee-0ddc-4339-928c-541bfa547ede", "row_index": 376, "timestamp": "2019-08-21T13:47:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 873, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33703ee-0ddc-4339-928c-541bfa547ede", "eventTime": "2019-08-21T13:47:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddf621847-a864-4b35-be5f-455018e76a58", "record_id": "flaws_cloudtrail:0000377:ddf621847-a864-4b35-be5f-455018e76a58", "row_index": 377, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 956, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddf621847-a864-4b35-be5f-455018e76a58", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa6205be-0466-4246-8ad6-0bfbd47df527", "record_id": "flaws_cloudtrail:0000378:fa6205be-0466-4246-8ad6-0bfbd47df527", "row_index": 378, "timestamp": "2019-08-21T13:47:07Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa6205be-0466-4246-8ad6-0bfbd47df527", "eventTime": "2019-08-21T13:47:07Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7101bea6-8b38-4979-9b46-86c988cdd870", "record_id": "flaws_cloudtrail:0000379:7101bea6-8b38-4979-9b46-86c988cdd870", "row_index": 379, "timestamp": "2019-08-21T13:47:07Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7101bea6-8b38-4979-9b46-86c988cdd870", "eventTime": "2019-08-21T13:47:07Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82cb2ed3-fd4d-4ece-8e1c-7e604996fcba", "record_id": "flaws_cloudtrail:0000380:82cb2ed3-fd4d-4ece-8e1c-7e604996fcba", "row_index": 380, "timestamp": "2019-08-21T13:47:07Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82cb2ed3-fd4d-4ece-8e1c-7e604996fcba", "eventTime": "2019-08-21T13:47:07Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a2720b8-1195-434a-b6ad-ab2b6d37b7be", "record_id": "flaws_cloudtrail:0000381:1a2720b8-1195-434a-b6ad-ab2b6d37b7be", "row_index": 381, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a2720b8-1195-434a-b6ad-ab2b6d37b7be", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4be5224-bcd7-4ef7-a940-eca2a4f8bb66", "record_id": "flaws_cloudtrail:0000382:e4be5224-bcd7-4ef7-a940-eca2a4f8bb66", "row_index": 382, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4be5224-bcd7-4ef7-a940-eca2a4f8bb66", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92736-586a-4434-871f-1481bca59bab", "record_id": "flaws_cloudtrail:0000383:92736-586a-4434-871f-1481bca59bab", "row_index": 383, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92736-586a-4434-871f-1481bca59bab", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b72f1d68-c737-4eb4-8581-b0f8cce179841", "record_id": "flaws_cloudtrail:0000384:b72f1d68-c737-4eb4-8581-b0f8cce179841", "row_index": 384, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b72f1d68-c737-4eb4-8581-b0f8cce179841", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe1abe8c-0322-4f7e-8e26-e85eee06110b", "record_id": "flaws_cloudtrail:0000385:fe1abe8c-0322-4f7e-8e26-e85eee06110b", "row_index": 385, "timestamp": "2019-08-21T13:47:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe1abe8c-0322-4f7e-8e26-e85eee06110b", "eventTime": "2019-08-21T13:47:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bd06911-2a8e-4d9e-8fb2-216e7692ec34", "record_id": "flaws_cloudtrail:0000386:7bd06911-2a8e-4d9e-8fb2-216e7692ec34", "row_index": 386, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bd06911-2a8e-4d9e-8fb2-216e7692ec34", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de1a83f3-eff6-43b7-8568-4e68bbbbbdcc", "record_id": "flaws_cloudtrail:0000387:de1a83f3-eff6-43b7-8568-4e68bbbbbdcc", "row_index": 387, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de1a83f3-eff6-43b7-8568-4e68bbbbbdcc", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06836-6353-41a4-bf33-08c6cc6868e6", "record_id": "flaws_cloudtrail:0000388:c06836-6353-41a4-bf33-08c6cc6868e6", "row_index": 388, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06836-6353-41a4-bf33-08c6cc6868e6", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3335f8-4930-41a5-a146-8da36ad30f8e", "record_id": "flaws_cloudtrail:0000389:8d3335f8-4930-41a5-a146-8da36ad30f8e", "row_index": 389, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3335f8-4930-41a5-a146-8da36ad30f8e", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08799ec-abd8-45cb-9bac-709a78273b71", "record_id": "flaws_cloudtrail:0000390:08799ec-abd8-45cb-9bac-709a78273b71", "row_index": 390, "timestamp": "2019-08-21T13:47:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08799ec-abd8-45cb-9bac-709a78273b71", "eventTime": "2019-08-21T13:47:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fcdd8a7-cce9-4aa7-953a-603f35092abe", "record_id": "flaws_cloudtrail:0000391:0fcdd8a7-cce9-4aa7-953a-603f35092abe", "row_index": 391, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fcdd8a7-cce9-4aa7-953a-603f35092abe", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb6f3880-a15c-4d61-9b8c-6d8dc1c3e9d7", "record_id": "flaws_cloudtrail:0000392:eb6f3880-a15c-4d61-9b8c-6d8dc1c3e9d7", "row_index": 392, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb6f3880-a15c-4d61-9b8c-6d8dc1c3e9d7", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "183ee0cb-db30-48fe-a35c-8b2b6cbda543", "record_id": "flaws_cloudtrail:0000393:183ee0cb-db30-48fe-a35c-8b2b6cbda543", "row_index": 393, "timestamp": "2019-08-21T13:47:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "183ee0cb-db30-48fe-a35c-8b2b6cbda543", "eventTime": "2019-08-21T13:47:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d830afb-31cd-48c8-b277-898c5fd6293e", "record_id": "flaws_cloudtrail:0000394:5d830afb-31cd-48c8-b277-898c5fd6293e", "row_index": 394, "timestamp": "2019-08-21T13:47:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d830afb-31cd-48c8-b277-898c5fd6293e", "eventTime": "2019-08-21T13:47:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2226d20-81b8-4bf9-837c-8d333edd0c5b", "record_id": "flaws_cloudtrail:0000395:c2226d20-81b8-4bf9-837c-8d333edd0c5b", "row_index": 395, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2226d20-81b8-4bf9-837c-8d333edd0c5b", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9546ced8-e942-4609-a0ba-af09d4f3b1fe", "record_id": "flaws_cloudtrail:0000396:9546ced8-e942-4609-a0ba-af09d4f3b1fe", "row_index": 396, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9546ced8-e942-4609-a0ba-af09d4f3b1fe", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a2720b8-1195-434a-b6ad-ab2b6d37b7be", "record_id": "flaws_cloudtrail:0000397:1a2720b8-1195-434a-b6ad-ab2b6d37b7be", "row_index": 397, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a2720b8-1195-434a-b6ad-ab2b6d37b7be", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4be5224-bcd7-4ef7-a940-eca2a4f8bb66", "record_id": "flaws_cloudtrail:0000398:e4be5224-bcd7-4ef7-a940-eca2a4f8bb66", "row_index": 398, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 936, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4be5224-bcd7-4ef7-a940-eca2a4f8bb66", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92736-586a-4434-871f-1481bca59bab", "record_id": "flaws_cloudtrail:0000399:92736-586a-4434-871f-1481bca59bab", "row_index": 399, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92736-586a-4434-871f-1481bca59bab", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b72f1d68-c737-4eb4-8581-b0f8cce179841", "record_id": "flaws_cloudtrail:0000400:b72f1d68-c737-4eb4-8581-b0f8cce179841", "row_index": 400, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 937, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b72f1d68-c737-4eb4-8581-b0f8cce179841", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_ap-northeast-2_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe1abe8c-0322-4f7e-8e26-e85eee06110b", "record_id": "flaws_cloudtrail:0000401:fe1abe8c-0322-4f7e-8e26-e85eee06110b", "row_index": 401, "timestamp": "2019-08-21T13:47:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe1abe8c-0322-4f7e-8e26-e85eee06110b", "eventTime": "2019-08-21T13:47:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bd06911-2a8e-4d9e-8fb2-216e7692ec34", "record_id": "flaws_cloudtrail:0000402:7bd06911-2a8e-4d9e-8fb2-216e7692ec34", "row_index": 402, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 890, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bd06911-2a8e-4d9e-8fb2-216e7692ec34", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de1a83f3-eff6-43b7-8568-4e68bbbbbdcc", "record_id": "flaws_cloudtrail:0000403:de1a83f3-eff6-43b7-8568-4e68bbbbbdcc", "row_index": 403, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de1a83f3-eff6-43b7-8568-4e68bbbbbdcc", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06836-6353-41a4-bf33-08c6cc6868e6", "record_id": "flaws_cloudtrail:0000404:c06836-6353-41a4-bf33-08c6cc6868e6", "row_index": 404, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06836-6353-41a4-bf33-08c6cc6868e6", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d3335f8-4930-41a5-a146-8da36ad30f8e", "record_id": "flaws_cloudtrail:0000405:8d3335f8-4930-41a5-a146-8da36ad30f8e", "row_index": 405, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 971, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d3335f8-4930-41a5-a146-8da36ad30f8e", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08799ec-abd8-45cb-9bac-709a78273b71", "record_id": "flaws_cloudtrail:0000406:08799ec-abd8-45cb-9bac-709a78273b71", "row_index": 406, "timestamp": "2019-08-21T13:47:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08799ec-abd8-45cb-9bac-709a78273b71", "eventTime": "2019-08-21T13:47:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fcdd8a7-cce9-4aa7-953a-603f35092abe", "record_id": "flaws_cloudtrail:0000407:0fcdd8a7-cce9-4aa7-953a-603f35092abe", "row_index": 407, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fcdd8a7-cce9-4aa7-953a-603f35092abe", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb6f3880-a15c-4d61-9b8c-6d8dc1c3e9d7", "record_id": "flaws_cloudtrail:0000408:eb6f3880-a15c-4d61-9b8c-6d8dc1c3e9d7", "row_index": 408, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 953, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb6f3880-a15c-4d61-9b8c-6d8dc1c3e9d7", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "183ee0cb-db30-48fe-a35c-8b2b6cbda543", "record_id": "flaws_cloudtrail:0000409:183ee0cb-db30-48fe-a35c-8b2b6cbda543", "row_index": 409, "timestamp": "2019-08-21T13:47:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "183ee0cb-db30-48fe-a35c-8b2b6cbda543", "eventTime": "2019-08-21T13:47:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d830afb-31cd-48c8-b277-898c5fd6293e", "record_id": "flaws_cloudtrail:0000410:5d830afb-31cd-48c8-b277-898c5fd6293e", "row_index": 410, "timestamp": "2019-08-21T13:47:08Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d830afb-31cd-48c8-b277-898c5fd6293e", "eventTime": "2019-08-21T13:47:08Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2226d20-81b8-4bf9-837c-8d333edd0c5b", "record_id": "flaws_cloudtrail:0000411:c2226d20-81b8-4bf9-837c-8d333edd0c5b", "row_index": 411, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2226d20-81b8-4bf9-837c-8d333edd0c5b", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9546ced8-e942-4609-a0ba-af09d4f3b1fe", "record_id": "flaws_cloudtrail:0000412:9546ced8-e942-4609-a0ba-af09d4f3b1fe", "row_index": 412, "timestamp": "2019-08-21T13:47:08Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9546ced8-e942-4609-a0ba-af09d4f3b1fe", "eventTime": "2019-08-21T13:47:08Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44cd93e8-1b82-4b0e-b50e-31b5839bc5ac", "record_id": "flaws_cloudtrail:0000413:44cd93e8-1b82-4b0e-b50e-31b5839bc5ac", "row_index": 413, "timestamp": "2019-08-21T13:47:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44cd93e8-1b82-4b0e-b50e-31b5839bc5ac", "eventTime": "2019-08-21T13:47:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0eb28d2-34b0-4bdd-a9ab-8655a0c43d9a", "record_id": "flaws_cloudtrail:0000414:b0eb28d2-34b0-4bdd-a9ab-8655a0c43d9a", "row_index": 414, "timestamp": "2019-08-21T13:47:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0eb28d2-34b0-4bdd-a9ab-8655a0c43d9a", "eventTime": "2019-08-21T13:47:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "066b2c8a-0058-422d-841f-897a512b50ef", "record_id": "flaws_cloudtrail:0000415:066b2c8a-0058-422d-841f-897a512b50ef", "row_index": 415, "timestamp": "2019-08-21T13:47:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "066b2c8a-0058-422d-841f-897a512b50ef", "eventTime": "2019-08-21T13:47:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1276fcb4-3d09-40e1-8a92-1c9e7598af19", "record_id": "flaws_cloudtrail:0000416:1276fcb4-3d09-40e1-8a92-1c9e7598af19", "row_index": 416, "timestamp": "2019-08-21T13:47:09Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1276fcb4-3d09-40e1-8a92-1c9e7598af19", "eventTime": "2019-08-21T13:47:09Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44cd93e8-1b82-4b0e-b50e-31b5839bc5ac", "record_id": "flaws_cloudtrail:0000417:44cd93e8-1b82-4b0e-b50e-31b5839bc5ac", "row_index": 417, "timestamp": "2019-08-21T13:47:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44cd93e8-1b82-4b0e-b50e-31b5839bc5ac", "eventTime": "2019-08-21T13:47:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0eb28d2-34b0-4bdd-a9ab-8655a0c43d9a", "record_id": "flaws_cloudtrail:0000418:b0eb28d2-34b0-4bdd-a9ab-8655a0c43d9a", "row_index": 418, "timestamp": "2019-08-21T13:47:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0eb28d2-34b0-4bdd-a9ab-8655a0c43d9a", "eventTime": "2019-08-21T13:47:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "066b2c8a-0058-422d-841f-897a512b50ef", "record_id": "flaws_cloudtrail:0000419:066b2c8a-0058-422d-841f-897a512b50ef", "row_index": 419, "timestamp": "2019-08-21T13:47:09Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "066b2c8a-0058-422d-841f-897a512b50ef", "eventTime": "2019-08-21T13:47:09Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1276fcb4-3d09-40e1-8a92-1c9e7598af19", "record_id": "flaws_cloudtrail:0000420:1276fcb4-3d09-40e1-8a92-1c9e7598af19", "row_index": 420, "timestamp": "2019-08-21T13:47:09Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1276fcb4-3d09-40e1-8a92-1c9e7598af19", "eventTime": "2019-08-21T13:47:09Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "150df00e-d4c1-4199-9e80-d0d3d7866e3d", "record_id": "flaws_cloudtrail:0000421:150df00e-d4c1-4199-9e80-d0d3d7866e3d", "row_index": 421, "timestamp": "2019-08-21T13:47:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "150df00e-d4c1-4199-9e80-d0d3d7866e3d", "eventTime": "2019-08-21T13:47:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72e551ef-aa39-4577-8039-b141d6a0dcf4", "record_id": "flaws_cloudtrail:0000422:72e551ef-aa39-4577-8039-b141d6a0dcf4", "row_index": 422, "timestamp": "2019-08-21T13:47:10Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72e551ef-aa39-4577-8039-b141d6a0dcf4", "eventTime": "2019-08-21T13:47:10Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a05879c2-8ff9-476f-8d07-8640ca484a98", "record_id": "flaws_cloudtrail:0000423:a05879c2-8ff9-476f-8d07-8640ca484a98", "row_index": 423, "timestamp": "2019-08-21T13:47:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a05879c2-8ff9-476f-8d07-8640ca484a98", "eventTime": "2019-08-21T13:47:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "683316-a727-420a-a4b9-9f1e011bf00c", "record_id": "flaws_cloudtrail:0000424:683316-a727-420a-a4b9-9f1e011bf00c", "row_index": 424, "timestamp": "2019-08-21T13:47:10Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "683316-a727-420a-a4b9-9f1e011bf00c", "eventTime": "2019-08-21T13:47:10Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5769ce1e-7b9b-413c-8af2-e85629e6de1f", "record_id": "flaws_cloudtrail:0000425:5769ce1e-7b9b-413c-8af2-e85629e6de1f", "row_index": 425, "timestamp": "2019-08-21T13:47:10Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5769ce1e-7b9b-413c-8af2-e85629e6de1f", "eventTime": "2019-08-21T13:47:10Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba1234d5-5e33-4375-bae4-f4d22ee2aca2", "record_id": "flaws_cloudtrail:0000426:ba1234d5-5e33-4375-bae4-f4d22ee2aca2", "row_index": 426, "timestamp": "2019-08-21T13:47:10Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba1234d5-5e33-4375-bae4-f4d22ee2aca2", "eventTime": "2019-08-21T13:47:10Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "150df00e-d4c1-4199-9e80-d0d3d7866e3d", "record_id": "flaws_cloudtrail:0000427:150df00e-d4c1-4199-9e80-d0d3d7866e3d", "row_index": 427, "timestamp": "2019-08-21T13:47:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "150df00e-d4c1-4199-9e80-d0d3d7866e3d", "eventTime": "2019-08-21T13:47:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72e551ef-aa39-4577-8039-b141d6a0dcf4", "record_id": "flaws_cloudtrail:0000428:72e551ef-aa39-4577-8039-b141d6a0dcf4", "row_index": 428, "timestamp": "2019-08-21T13:47:10Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 916, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72e551ef-aa39-4577-8039-b141d6a0dcf4", "eventTime": "2019-08-21T13:47:10Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a05879c2-8ff9-476f-8d07-8640ca484a98", "record_id": "flaws_cloudtrail:0000429:a05879c2-8ff9-476f-8d07-8640ca484a98", "row_index": 429, "timestamp": "2019-08-21T13:47:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a05879c2-8ff9-476f-8d07-8640ca484a98", "eventTime": "2019-08-21T13:47:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "683316-a727-420a-a4b9-9f1e011bf00c", "record_id": "flaws_cloudtrail:0000430:683316-a727-420a-a4b9-9f1e011bf00c", "row_index": 430, "timestamp": "2019-08-21T13:47:10Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "683316-a727-420a-a4b9-9f1e011bf00c", "eventTime": "2019-08-21T13:47:10Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5769ce1e-7b9b-413c-8af2-e85629e6de1f", "record_id": "flaws_cloudtrail:0000431:5769ce1e-7b9b-413c-8af2-e85629e6de1f", "row_index": 431, "timestamp": "2019-08-21T13:47:10Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 955, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5769ce1e-7b9b-413c-8af2-e85629e6de1f", "eventTime": "2019-08-21T13:47:10Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba1234d5-5e33-4375-bae4-f4d22ee2aca2", "record_id": "flaws_cloudtrail:0000432:ba1234d5-5e33-4375-bae4-f4d22ee2aca2", "row_index": 432, "timestamp": "2019-08-21T13:47:10Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba1234d5-5e33-4375-bae4-f4d22ee2aca2", "eventTime": "2019-08-21T13:47:10Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63ef6134-7dcf-4df0-aee5-d37375", "record_id": "flaws_cloudtrail:0000433:63ef6134-7dcf-4df0-aee5-d37375", "row_index": 433, "timestamp": "2019-08-21T13:47:11Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63ef6134-7dcf-4df0-aee5-d37375", "eventTime": "2019-08-21T13:47:11Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa3ca999-316f-489d-bf20-9f65c35f8f7f", "record_id": "flaws_cloudtrail:0000434:aa3ca999-316f-489d-bf20-9f65c35f8f7f", "row_index": 434, "timestamp": "2019-08-21T13:47:11Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa3ca999-316f-489d-bf20-9f65c35f8f7f", "eventTime": "2019-08-21T13:47:11Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f984f047-ce43-4037-927b-e7c4f05fb123", "record_id": "flaws_cloudtrail:0000435:f984f047-ce43-4037-927b-e7c4f05fb123", "row_index": 435, "timestamp": "2019-08-21T13:47:11Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f984f047-ce43-4037-927b-e7c4f05fb123", "eventTime": "2019-08-21T13:47:11Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76ed6e37-9b63-45c8-881a-8ec9ad1055da", "record_id": "flaws_cloudtrail:0000436:76ed6e37-9b63-45c8-881a-8ec9ad1055da", "row_index": 436, "timestamp": "2019-08-21T13:47:11Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76ed6e37-9b63-45c8-881a-8ec9ad1055da", "eventTime": "2019-08-21T13:47:11Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fd069f4-d14c-4153-8ac3-b298728d51c41", "record_id": "flaws_cloudtrail:0000437:2fd069f4-d14c-4153-8ac3-b298728d51c41", "row_index": 437, "timestamp": "2019-08-21T13:47:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fd069f4-d14c-4153-8ac3-b298728d51c41", "eventTime": "2019-08-21T13:47:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63ef6134-7dcf-4df0-aee5-d37375", "record_id": "flaws_cloudtrail:0000438:63ef6134-7dcf-4df0-aee5-d37375", "row_index": 438, "timestamp": "2019-08-21T13:47:11Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 949, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63ef6134-7dcf-4df0-aee5-d37375", "eventTime": "2019-08-21T13:47:11Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa3ca999-316f-489d-bf20-9f65c35f8f7f", "record_id": "flaws_cloudtrail:0000439:aa3ca999-316f-489d-bf20-9f65c35f8f7f", "row_index": 439, "timestamp": "2019-08-21T13:47:11Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 970, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa3ca999-316f-489d-bf20-9f65c35f8f7f", "eventTime": "2019-08-21T13:47:11Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"keyName": "811596193553_sa-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f984f047-ce43-4037-927b-e7c4f05fb123", "record_id": "flaws_cloudtrail:0000440:f984f047-ce43-4037-927b-e7c4f05fb123", "row_index": 440, "timestamp": "2019-08-21T13:47:11Z", "event_type": "CreateKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f984f047-ce43-4037-927b-e7c4f05fb123", "eventTime": "2019-08-21T13:47:11Z", "eventName": "CreateKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "811596193553_us-east-1_my_key_pair"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76ed6e37-9b63-45c8-881a-8ec9ad1055da", "record_id": "flaws_cloudtrail:0000441:76ed6e37-9b63-45c8-881a-8ec9ad1055da", "row_index": 441, "timestamp": "2019-08-21T13:47:11Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76ed6e37-9b63-45c8-881a-8ec9ad1055da", "eventTime": "2019-08-21T13:47:11Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fd069f4-d14c-4153-8ac3-b298728d51c41", "record_id": "flaws_cloudtrail:0000442:2fd069f4-d14c-4153-8ac3-b298728d51c41", "row_index": 442, "timestamp": "2019-08-21T13:47:11Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fd069f4-d14c-4153-8ac3-b298728d51c41", "eventTime": "2019-08-21T13:47:11Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a81600d6-779d-4eb8-92c2-45e9f96a678a", "record_id": "flaws_cloudtrail:0000443:a81600d6-779d-4eb8-92c2-45e9f96a678a", "row_index": 443, "timestamp": "2019-08-21T13:47:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a81600d6-779d-4eb8-92c2-45e9f96a678a", "eventTime": "2019-08-21T13:47:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b477e56-630e-44f2-87d9-13faead1f662", "record_id": "flaws_cloudtrail:0000444:3b477e56-630e-44f2-87d9-13faead1f662", "row_index": 444, "timestamp": "2019-08-21T13:47:12Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b477e56-630e-44f2-87d9-13faead1f662", "eventTime": "2019-08-21T13:47:12Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93f236e6-fcea-4b0e-893b-e61e38132471", "record_id": "flaws_cloudtrail:0000445:93f236e6-fcea-4b0e-893b-e61e38132471", "row_index": 445, "timestamp": "2019-08-21T13:47:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93f236e6-fcea-4b0e-893b-e61e38132471", "eventTime": "2019-08-21T13:47:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2a568680-0568-40ec-85de-b39a793c6d26", "record_id": "flaws_cloudtrail:0000446:f2a568680-0568-40ec-85de-b39a793c6d26", "row_index": 446, "timestamp": "2019-08-21T13:47:12Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2a568680-0568-40ec-85de-b39a793c6d26", "eventTime": "2019-08-21T13:47:12Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a81600d6-779d-4eb8-92c2-45e9f96a678a", "record_id": "flaws_cloudtrail:0000447:a81600d6-779d-4eb8-92c2-45e9f96a678a", "row_index": 447, "timestamp": "2019-08-21T13:47:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a81600d6-779d-4eb8-92c2-45e9f96a678a", "eventTime": "2019-08-21T13:47:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b477e56-630e-44f2-87d9-13faead1f662", "record_id": "flaws_cloudtrail:0000448:3b477e56-630e-44f2-87d9-13faead1f662", "row_index": 448, "timestamp": "2019-08-21T13:47:12Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b477e56-630e-44f2-87d9-13faead1f662", "eventTime": "2019-08-21T13:47:12Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93f236e6-fcea-4b0e-893b-e61e38132471", "record_id": "flaws_cloudtrail:0000449:93f236e6-fcea-4b0e-893b-e61e38132471", "row_index": 449, "timestamp": "2019-08-21T13:47:12Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 850, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93f236e6-fcea-4b0e-893b-e61e38132471", "eventTime": "2019-08-21T13:47:12Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2a568680-0568-40ec-85de-b39a793c6d26", "record_id": "flaws_cloudtrail:0000450:f2a568680-0568-40ec-85de-b39a793c6d26", "row_index": 450, "timestamp": "2019-08-21T13:47:12Z", "event_type": "CreateDefaultVpc", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2a568680-0568-40ec-85de-b39a793c6d26", "eventTime": "2019-08-21T13:47:12Z", "eventName": "CreateDefaultVpc", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"CreateDefaultVpcRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d11c002e-da9c-455a-86d5-25fef691bbcc", "record_id": "flaws_cloudtrail:0000451:d11c002e-da9c-455a-86d5-25fef691bbcc", "row_index": 451, "timestamp": "2019-08-21T13:47:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d11c002e-da9c-455a-86d5-25fef691bbcc", "eventTime": "2019-08-21T13:47:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d11c002e-da9c-455a-86d5-25fef691bbcc", "record_id": "flaws_cloudtrail:0000452:d11c002e-da9c-455a-86d5-25fef691bbcc", "row_index": 452, "timestamp": "2019-08-21T13:47:13Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d11c002e-da9c-455a-86d5-25fef691bbcc", "eventTime": "2019-08-21T13:47:13Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1579ca1-6396-448b-a89d-2a680bbc5350", "record_id": "flaws_cloudtrail:0000453:c1579ca1-6396-448b-a89d-2a680bbc5350", "row_index": 453, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1579ca1-6396-448b-a89d-2a680bbc5350", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47dc06da-84da-4515-a150-054ce39db043", "record_id": "flaws_cloudtrail:0000454:47dc06da-84da-4515-a150-054ce39db043", "row_index": 454, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47dc06da-84da-4515-a150-054ce39db043", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "837c1ccf-2201-4f4c-a948-46a7863b797f", "record_id": "flaws_cloudtrail:0000455:837c1ccf-2201-4f4c-a948-46a7863b797f", "row_index": 455, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1952, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "837c1ccf-2201-4f4c-a948-46a7863b797f", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: qIFjxunshscVyeGb6yuaoMducIcCYTaj-Pz8SbIj4JT6DQz--KhtHfKpdY8739AJfo-ZoYuRt5EPU5jldl9IvDVpAEKb0qUsE9gSMrx_CPJzJsEBNE-Gcp3MVZRvIk6x7fDFgCe3_M8BZynUhnuRucaDmj0ij7IwWeJOq3C84mRMCahg0_3j8qV3Hb-UrE6f61BY25YCsdN0joLMUAMBEL7naHx2E3YoNCps1oKkWd1RSaMnO95q283PC1nwWe9k5WhWhJvYQUJUqPfv8oti3z1lzfodAZX0tbJwXJT2UcT6-Hos91jZX8l8c5EX5Fd0F3UCF5H7UWRsgEx513TdDsMTB0-wE60E-fljXUzwKoF-GIa84IQUfIQEVn-EX3tz5VDKTmLiyum1TgsMCkcGMVvwfRUmhEgDuk_0aXwt54YpQHtm_rMJuWcuHP8sS-MvU-jWAFreRe-6ZiMZ0wUF73dt0Z581sQLXqGPyBbtAkYgFsz6ZSiEWmrXlQPwJzlQwi5Z26muA4G05-ZTc3YsH8IWyKuWTqpAJBQpbW6EJVjoiixM8BxSLFKNGGZPckd1Y1a2DBhiB1C47o3uNgKmmj0Vidpdf4EnxZqAEsWZQDZb_mMJ1NMVdFN-dIiclruegYio4Rfd2qm4TFEfkMPwFP6H9ZOkSjkCjR8Gwg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c10c4c85-91b3-48eb-b803-d8c7e619e5e1", "record_id": "flaws_cloudtrail:0000456:c10c4c85-91b3-48eb-b803-d8c7e619e5e1", "row_index": 456, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c10c4c85-91b3-48eb-b803-d8c7e619e5e1", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a712f900-b7e1-45a0-8fe3-4dce45e970ba", "record_id": "flaws_cloudtrail:0000457:a712f900-b7e1-45a0-8fe3-4dce45e970ba", "row_index": 457, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a712f900-b7e1-45a0-8fe3-4dce45e970ba", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "348748c01-90f3-419f-a61b-e42855e8caf0", "record_id": "flaws_cloudtrail:0000458:348748c01-90f3-419f-a61b-e42855e8caf0", "row_index": 458, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "348748c01-90f3-419f-a61b-e42855e8caf0", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c37a856-ccb2-4f54-8604-69f5047e424c", "record_id": "flaws_cloudtrail:0000459:5c37a856-ccb2-4f54-8604-69f5047e424c", "row_index": 459, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c37a856-ccb2-4f54-8604-69f5047e424c", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1846ce74-0632-42bd-ab62-2fbfcb022b29", "record_id": "flaws_cloudtrail:0000460:1846ce74-0632-42bd-ab62-2fbfcb022b29", "row_index": 460, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1846ce74-0632-42bd-ab62-2fbfcb022b29", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f463d2af-f959-4b1e-9bbb-b97361272ba8", "record_id": "flaws_cloudtrail:0000461:f463d2af-f959-4b1e-9bbb-b97361272ba8", "row_index": 461, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f463d2af-f959-4b1e-9bbb-b97361272ba8", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fbc50d4-79e7-4599-a412-fafaef55b2e5", "record_id": "flaws_cloudtrail:0000462:4fbc50d4-79e7-4599-a412-fafaef55b2e5", "row_index": 462, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fbc50d4-79e7-4599-a412-fafaef55b2e5", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1579ca1-6396-448b-a89d-2a680bbc5350", "record_id": "flaws_cloudtrail:0000463:c1579ca1-6396-448b-a89d-2a680bbc5350", "row_index": 463, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1579ca1-6396-448b-a89d-2a680bbc5350", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47dc06da-84da-4515-a150-054ce39db043", "record_id": "flaws_cloudtrail:0000464:47dc06da-84da-4515-a150-054ce39db043", "row_index": 464, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47dc06da-84da-4515-a150-054ce39db043", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "837c1ccf-2201-4f4c-a948-46a7863b797f", "record_id": "flaws_cloudtrail:0000465:837c1ccf-2201-4f4c-a948-46a7863b797f", "row_index": 465, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1952, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "837c1ccf-2201-4f4c-a948-46a7863b797f", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: qIFjxunshscVyeGb6yuaoMducIcCYTaj-Pz8SbIj4JT6DQz--KhtHfKpdY8739AJfo-ZoYuRt5EPU5jldl9IvDVpAEKb0qUsE9gSMrx_CPJzJsEBNE-Gcp3MVZRvIk6x7fDFgCe3_M8BZynUhnuRucaDmj0ij7IwWeJOq3C84mRMCahg0_3j8qV3Hb-UrE6f61BY25YCsdN0joLMUAMBEL7naHx2E3YoNCps1oKkWd1RSaMnO95q283PC1nwWe9k5WhWhJvYQUJUqPfv8oti3z1lzfodAZX0tbJwXJT2UcT6-Hos91jZX8l8c5EX5Fd0F3UCF5H7UWRsgEx513TdDsMTB0-wE60E-fljXUzwKoF-GIa84IQUfIQEVn-EX3tz5VDKTmLiyum1TgsMCkcGMVvwfRUmhEgDuk_0aXwt54YpQHtm_rMJuWcuHP8sS-MvU-jWAFreRe-6ZiMZ0wUF73dt0Z581sQLXqGPyBbtAkYgFsz6ZSiEWmrXlQPwJzlQwi5Z26muA4G05-ZTc3YsH8IWyKuWTqpAJBQpbW6EJVjoiixM8BxSLFKNGGZPckd1Y1a2DBhiB1C47o3uNgKmmj0Vidpdf4EnxZqAEsWZQDZb_mMJ1NMVdFN-dIiclruegYio4Rfd2qm4TFEfkMPwFP6H9ZOkSjkCjR8Gwg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c10c4c85-91b3-48eb-b803-d8c7e619e5e1", "record_id": "flaws_cloudtrail:0000466:c10c4c85-91b3-48eb-b803-d8c7e619e5e1", "row_index": 466, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c10c4c85-91b3-48eb-b803-d8c7e619e5e1", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a712f900-b7e1-45a0-8fe3-4dce45e970ba", "record_id": "flaws_cloudtrail:0000467:a712f900-b7e1-45a0-8fe3-4dce45e970ba", "row_index": 467, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a712f900-b7e1-45a0-8fe3-4dce45e970ba", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "348748c01-90f3-419f-a61b-e42855e8caf0", "record_id": "flaws_cloudtrail:0000468:348748c01-90f3-419f-a61b-e42855e8caf0", "row_index": 468, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "348748c01-90f3-419f-a61b-e42855e8caf0", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c37a856-ccb2-4f54-8604-69f5047e424c", "record_id": "flaws_cloudtrail:0000469:5c37a856-ccb2-4f54-8604-69f5047e424c", "row_index": 469, "timestamp": "2019-08-21T13:47:15Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c37a856-ccb2-4f54-8604-69f5047e424c", "eventTime": "2019-08-21T13:47:15Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1846ce74-0632-42bd-ab62-2fbfcb022b29", "record_id": "flaws_cloudtrail:0000470:1846ce74-0632-42bd-ab62-2fbfcb022b29", "row_index": 470, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1846ce74-0632-42bd-ab62-2fbfcb022b29", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f463d2af-f959-4b1e-9bbb-b97361272ba8", "record_id": "flaws_cloudtrail:0000471:f463d2af-f959-4b1e-9bbb-b97361272ba8", "row_index": 471, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f463d2af-f959-4b1e-9bbb-b97361272ba8", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fbc50d4-79e7-4599-a412-fafaef55b2e5", "record_id": "flaws_cloudtrail:0000472:4fbc50d4-79e7-4599-a412-fafaef55b2e5", "row_index": 472, "timestamp": "2019-08-21T13:47:15Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fbc50d4-79e7-4599-a412-fafaef55b2e5", "eventTime": "2019-08-21T13:47:15Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7e312de-954f-4880-a89b-d46497eb374a", "record_id": "flaws_cloudtrail:0000473:f7e312de-954f-4880-a89b-d46497eb374a", "row_index": 473, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7e312de-954f-4880-a89b-d46497eb374a", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d8a738-c18a-4f69-8672-129d352f3455", "record_id": "flaws_cloudtrail:0000474:e5d8a738-c18a-4f69-8672-129d352f3455", "row_index": 474, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d8a738-c18a-4f69-8672-129d352f3455", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2046e5e-5ebb-46eb-88b7-4eedaee223d5", "record_id": "flaws_cloudtrail:0000475:b2046e5e-5ebb-46eb-88b7-4eedaee223d5", "row_index": 475, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1949, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2046e5e-5ebb-46eb-88b7-4eedaee223d5", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VpFbJ-VBty1CK0A6HyCjWnlV2JilAaiMRpsRQl2JHaHJ0L-SRhsmrtml99a9FvpeGO7vp7CpSA-tZMfk9KjYcPcmhvdNA3Qz6cquBpOkh_Jk0LVO0g_bOrBJljm-EzWF9LlXdXIcBMZtPMDdFsfkcXCErXQTjylVNz-B6PWr1ESdJSrlfu6-p5VZQ7BjIhfMrDDrSINtqtTkk0doRPVFvr8mrW7V9qfISeXJpn8U2oZNzNizxDxqSutoJqEZ16NWXF9idNNZwz9zSCLNoriqks_D-hChhf24D0WZAN1ZAvMDw722_gdIzElB_VFQH5fmJi8aBD8NIiVkiwnVRa5bbr_utEeu_ipPbF_OKpTxlrkxlGOBI9g_w48ORVV0PXHFoKZHRTWYVldKN2uIHhf0T_VNXsAH3T2yOVXT7xASU_1Aon5-6Am1I_hx54v31LIa_ftLhxJhRj96TmslI67qc_ZH0zg4zj7GHSu8QJlO7a767J0MBs9PUxX64mLc7DVjZueJR_UTLjVELpQ0hjRLw2-aTAHjfCPIGCf7ugIzGlr3097jfXtU1nbRPUiPYW6L-pleC6hkU_ib2HuWvEVcISgY1Da94-R93_qJBRhDUerlDaA5-hL3ARQh4R-3bCtBqA4pd2QMy9XqSNasNYPwZECanxZeWRwXozRS", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11818d-6028-4531-8afe-2f5f09755e29", "record_id": "flaws_cloudtrail:0000476:11818d-6028-4531-8afe-2f5f09755e29", "row_index": 476, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1296, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11818d-6028-4531-8afe-2f5f09755e29", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b449b853-435a-414d-a99a-482ee833ee7f", "record_id": "flaws_cloudtrail:0000477:b449b853-435a-414d-a99a-482ee833ee7f", "row_index": 477, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1850, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b449b853-435a-414d-a99a-482ee833ee7f", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: W-qKJ19557-g5zoo0wEOYbkSdvblgCG73OQ82PI0VtgCA1u5AzOea2vmy1Yj0N35jzekZ2jtanyjVRUJbZi3ecJW528bx-lPkNrqT9Mg74Sb-EEsOyt2xCKMDA_5WYGV3LX--e0F2EtKYtyG-Qux2BaAqABoRbJNJpqdK1CN9Vv0dwIbLqupd1B3oObnlDkVoCXpJYblNZkMZSG7ty2nyqWM7pAKZ-d5w0_V_ZW6o1t21TF4jQnBivcbvRx36coxWUT3k2XbaP6ebNaPg4It0Oz3nr1tRl8CiWi_fEBo8ESvrV0hotwJat7dPsaeraB0bJJSH_dWoFelgPco_VKa4aQ-9Ojh4ftYxnrJXDfkNgsgab-00ScQ_DU_f50cMkNe7UZhMPelxFrncNDx0QWYWXHmwCqwNV4CpouQkW79sgKsTBARMjjN26CW4-g-XR35PymDRtXWt8h2gdTCrDJ805h-nOmg_KuCIGwDNrd8r71Rf9gfIIxiG8cVinwC-01dJhK-n9ZrKBDRH_VuwmSzgsffjHKMY7x4ZCAhr0V5LQBER-XRU1XCccwX6ObuvuZjXwOyTEToYuJrXKJBYCQ4aJ7RmjT5O_BgJ1ptrKgBiI12TTVz_P3uJFL52Zcs4inMLUmvFjLZAiDvf5HJOJRio9MaT3FeQAYCFIQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b60700f-1726-4584-b2c8-73a041144da", "record_id": "flaws_cloudtrail:0000478:9b60700f-1726-4584-b2c8-73a041144da", "row_index": 478, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b60700f-1726-4584-b2c8-73a041144da", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34aa5e63-405c-4a9a-a682-44a12b18f598", "record_id": "flaws_cloudtrail:0000479:34aa5e63-405c-4a9a-a682-44a12b18f598", "row_index": 479, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1949, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34aa5e63-405c-4a9a-a682-44a12b18f598", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: xPXLTb9CAq_xCDWFKwxj-mgHDqMkCJlKZcIetw4ZgYukptpC19WLc9Ak7fCF2VlKm36gpAgw7kZoTrs7H2oUG2W3dt-_rGbpjAwGehu3y5ugyi2D8wBtGSo4dUtePSBllbRcw7UZ8xmF03Qu4W76FL_QaOPZ4ZtVkxCbGPXz-7hC9Fdc1ZfRCD11IfHS3EezkC3jiEKKL6nmFzOSwsuGiirh1mLSl7ptHmkp0rKLabIng4r_t04-Abv6dlvrsS1chMLH4WEZRa_urp0zAzss_Rn7sXK1BqSW_mou-hBZMnTmFK9YC_CobXT8eURkR3DjdiIx6u_FEBFnVVlBVOIkrhIx2dVAy2ctsxEB9vE95h66jV2i9GxnCIQrP3GBFqvvtliW723An8uK9r2jC0wdt7EM3RclfLHXTBlQ6qJEtD6PTJ595YP_PRL0ErVD9W9AKeRPW-hzXDyOIrGs_Z47tEI_021Pd2NE9aQp0YLFwcPtSKGmHm_AjXGc8KrV6ePKPmNX87VD5msXRxxc_WkwPvAiiTuPb44letjb_ZLXE7lp94qn_FO7PD3jWAa33JCcSK3fZss6T9ixIanA-PTXYt10COwNEuctOvhvTcqHQ7YVa78RYKffknHK9z6hy8_gJ3FNqDM5VZzkm6KomOhTya4nmZS8uZJBPWIh", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd99f96c-e042-446a-82c5-2c1d0d0bf565", "record_id": "flaws_cloudtrail:0000480:dd99f96c-e042-446a-82c5-2c1d0d0bf565", "row_index": 480, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd99f96c-e042-446a-82c5-2c1d0d0bf565", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7e312de-954f-4880-a89b-d46497eb374a", "record_id": "flaws_cloudtrail:0000481:f7e312de-954f-4880-a89b-d46497eb374a", "row_index": 481, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7e312de-954f-4880-a89b-d46497eb374a", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5d8a738-c18a-4f69-8672-129d352f3455", "record_id": "flaws_cloudtrail:0000482:e5d8a738-c18a-4f69-8672-129d352f3455", "row_index": 482, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1206, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5d8a738-c18a-4f69-8672-129d352f3455", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2046e5e-5ebb-46eb-88b7-4eedaee223d5", "record_id": "flaws_cloudtrail:0000483:b2046e5e-5ebb-46eb-88b7-4eedaee223d5", "row_index": 483, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1949, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2046e5e-5ebb-46eb-88b7-4eedaee223d5", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VpFbJ-VBty1CK0A6HyCjWnlV2JilAaiMRpsRQl2JHaHJ0L-SRhsmrtml99a9FvpeGO7vp7CpSA-tZMfk9KjYcPcmhvdNA3Qz6cquBpOkh_Jk0LVO0g_bOrBJljm-EzWF9LlXdXIcBMZtPMDdFsfkcXCErXQTjylVNz-B6PWr1ESdJSrlfu6-p5VZQ7BjIhfMrDDrSINtqtTkk0doRPVFvr8mrW7V9qfISeXJpn8U2oZNzNizxDxqSutoJqEZ16NWXF9idNNZwz9zSCLNoriqks_D-hChhf24D0WZAN1ZAvMDw722_gdIzElB_VFQH5fmJi8aBD8NIiVkiwnVRa5bbr_utEeu_ipPbF_OKpTxlrkxlGOBI9g_w48ORVV0PXHFoKZHRTWYVldKN2uIHhf0T_VNXsAH3T2yOVXT7xASU_1Aon5-6Am1I_hx54v31LIa_ftLhxJhRj96TmslI67qc_ZH0zg4zj7GHSu8QJlO7a767J0MBs9PUxX64mLc7DVjZueJR_UTLjVELpQ0hjRLw2-aTAHjfCPIGCf7ugIzGlr3097jfXtU1nbRPUiPYW6L-pleC6hkU_ib2HuWvEVcISgY1Da94-R93_qJBRhDUerlDaA5-hL3ARQh4R-3bCtBqA4pd2QMy9XqSNasNYPwZECanxZeWRwXozRS", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11818d-6028-4531-8afe-2f5f09755e29", "record_id": "flaws_cloudtrail:0000484:11818d-6028-4531-8afe-2f5f09755e29", "row_index": 484, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1296, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11818d-6028-4531-8afe-2f5f09755e29", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b449b853-435a-414d-a99a-482ee833ee7f", "record_id": "flaws_cloudtrail:0000485:b449b853-435a-414d-a99a-482ee833ee7f", "row_index": 485, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1850, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b449b853-435a-414d-a99a-482ee833ee7f", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: W-qKJ19557-g5zoo0wEOYbkSdvblgCG73OQ82PI0VtgCA1u5AzOea2vmy1Yj0N35jzekZ2jtanyjVRUJbZi3ecJW528bx-lPkNrqT9Mg74Sb-EEsOyt2xCKMDA_5WYGV3LX--e0F2EtKYtyG-Qux2BaAqABoRbJNJpqdK1CN9Vv0dwIbLqupd1B3oObnlDkVoCXpJYblNZkMZSG7ty2nyqWM7pAKZ-d5w0_V_ZW6o1t21TF4jQnBivcbvRx36coxWUT3k2XbaP6ebNaPg4It0Oz3nr1tRl8CiWi_fEBo8ESvrV0hotwJat7dPsaeraB0bJJSH_dWoFelgPco_VKa4aQ-9Ojh4ftYxnrJXDfkNgsgab-00ScQ_DU_f50cMkNe7UZhMPelxFrncNDx0QWYWXHmwCqwNV4CpouQkW79sgKsTBARMjjN26CW4-g-XR35PymDRtXWt8h2gdTCrDJ805h-nOmg_KuCIGwDNrd8r71Rf9gfIIxiG8cVinwC-01dJhK-n9ZrKBDRH_VuwmSzgsffjHKMY7x4ZCAhr0V5LQBER-XRU1XCccwX6ObuvuZjXwOyTEToYuJrXKJBYCQ4aJ7RmjT5O_BgJ1ptrKgBiI12TTVz_P3uJFL52Zcs4inMLUmvFjLZAiDvf5HJOJRio9MaT3FeQAYCFIQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b60700f-1726-4584-b2c8-73a041144da", "record_id": "flaws_cloudtrail:0000486:9b60700f-1726-4584-b2c8-73a041144da", "row_index": 486, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b60700f-1726-4584-b2c8-73a041144da", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34aa5e63-405c-4a9a-a682-44a12b18f598", "record_id": "flaws_cloudtrail:0000487:34aa5e63-405c-4a9a-a682-44a12b18f598", "row_index": 487, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1949, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34aa5e63-405c-4a9a-a682-44a12b18f598", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: xPXLTb9CAq_xCDWFKwxj-mgHDqMkCJlKZcIetw4ZgYukptpC19WLc9Ak7fCF2VlKm36gpAgw7kZoTrs7H2oUG2W3dt-_rGbpjAwGehu3y5ugyi2D8wBtGSo4dUtePSBllbRcw7UZ8xmF03Qu4W76FL_QaOPZ4ZtVkxCbGPXz-7hC9Fdc1ZfRCD11IfHS3EezkC3jiEKKL6nmFzOSwsuGiirh1mLSl7ptHmkp0rKLabIng4r_t04-Abv6dlvrsS1chMLH4WEZRa_urp0zAzss_Rn7sXK1BqSW_mou-hBZMnTmFK9YC_CobXT8eURkR3DjdiIx6u_FEBFnVVlBVOIkrhIx2dVAy2ctsxEB9vE95h66jV2i9GxnCIQrP3GBFqvvtliW723An8uK9r2jC0wdt7EM3RclfLHXTBlQ6qJEtD6PTJ595YP_PRL0ErVD9W9AKeRPW-hzXDyOIrGs_Z47tEI_021Pd2NE9aQp0YLFwcPtSKGmHm_AjXGc8KrV6ePKPmNX87VD5msXRxxc_WkwPvAiiTuPb44letjb_ZLXE7lp94qn_FO7PD3jWAa33JCcSK3fZss6T9ixIanA-PTXYt10COwNEuctOvhvTcqHQ7YVa78RYKffknHK9z6hy8_gJ3FNqDM5VZzkm6KomOhTya4nmZS8uZJBPWIh", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd99f96c-e042-446a-82c5-2c1d0d0bf565", "record_id": "flaws_cloudtrail:0000488:dd99f96c-e042-446a-82c5-2c1d0d0bf565", "row_index": 488, "timestamp": "2019-08-21T13:47:16Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1397, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd99f96c-e042-446a-82c5-2c1d0d0bf565", "eventTime": "2019-08-21T13:47:16Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbf76dba-638a-47e3-963c-3e154d9feee4", "record_id": "flaws_cloudtrail:0000489:bbf76dba-638a-47e3-963c-3e154d9feee4", "row_index": 489, "timestamp": "2019-08-21T13:47:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbf76dba-638a-47e3-963c-3e154d9feee4", "eventTime": "2019-08-21T13:47:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e72273-9e19-48b8-98c8-36e11650d", "record_id": "flaws_cloudtrail:0000490:e72273-9e19-48b8-98c8-36e11650d", "row_index": 490, "timestamp": "2019-08-21T13:47:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e72273-9e19-48b8-98c8-36e11650d", "eventTime": "2019-08-21T13:47:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16dc229-9dde-4ec2-a09b-7a856787915d", "record_id": "flaws_cloudtrail:0000491:a16dc229-9dde-4ec2-a09b-7a856787915d", "row_index": 491, "timestamp": "2019-08-21T13:47:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16dc229-9dde-4ec2-a09b-7a856787915d", "eventTime": "2019-08-21T13:47:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbf76dba-638a-47e3-963c-3e154d9feee4", "record_id": "flaws_cloudtrail:0000492:bbf76dba-638a-47e3-963c-3e154d9feee4", "row_index": 492, "timestamp": "2019-08-21T13:47:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbf76dba-638a-47e3-963c-3e154d9feee4", "eventTime": "2019-08-21T13:47:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e72273-9e19-48b8-98c8-36e11650d", "record_id": "flaws_cloudtrail:0000493:e72273-9e19-48b8-98c8-36e11650d", "row_index": 493, "timestamp": "2019-08-21T13:47:17Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1202, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e72273-9e19-48b8-98c8-36e11650d", "eventTime": "2019-08-21T13:47:17Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16dc229-9dde-4ec2-a09b-7a856787915d", "record_id": "flaws_cloudtrail:0000494:a16dc229-9dde-4ec2-a09b-7a856787915d", "row_index": 494, "timestamp": "2019-08-21T13:47:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16dc229-9dde-4ec2-a09b-7a856787915d", "eventTime": "2019-08-21T13:47:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a33a87e-9110-44f4-a54a-647b9a84460f", "record_id": "flaws_cloudtrail:0000495:4a33a87e-9110-44f4-a54a-647b9a84460f", "row_index": 495, "timestamp": "2019-08-21T13:47:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1949, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a33a87e-9110-44f4-a54a-647b9a84460f", "eventTime": "2019-08-21T13:47:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: c-jqm6I6bj2WQe-XKkEm2_R9Jy9QEGMT_ZddSONM8srnUZLuqAyQQJo6QK4CBezmwLrvG1VP98IPUxmtSjv1C9SYM4TsYU16GdH_b9XqDWLXvqwukibTQN1rnEKvHxtSkLZKV8Q3nkxWab-tYz1F6g_zSQQTM8VO7gbmT_xgK2d4y8j2tQKpb6Hq_5c7M8pR29SvMLx7JKgW0SiC3EDgOhNDePwHb8sI9ZDnfWhMluI6x_yDV7_A_taMaSSID2kQoWN5EBAWkds7elSHMMx6MczUU6T9XmFYbr0wlWjQGJ3516Zb0IWB03od9FVH-yg9ZAenzQiQonG3p54lhTU1WcmVPQIeGIukNn1iIcNMRdTd1LOMJ_WXjpQVcgoLh-pmDcBq9R_6gOu9AjTwUsYD9dg_HzoSktFab3EsW2_3ZRfhXZwVBX9G7UDSrxtyXvQusbNJNM8TAki8P3YaIWfwRNu9lV8DW7lTUfHc9Q85D5TvjWiTqB7yubEaXL3J90pjvQjEbXleTf--_koAxfByK_Gn5fQDujvt64bNTuQNo9U6dNp2reMspGv0IXGCGHd5ehiF8Pw6JdjRJCnW-tHS08J-P5Zh-nRBGJGnj1Qdzr-BmuZeThDGHu6bo0Uoo2WJLfhPcDzKzwLqivA6SPGtaAjTQyQEL1qPHlUm", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb4717b-0dd2-403c-97b9-b1d28b25279", "record_id": "flaws_cloudtrail:0000496:8cb4717b-0dd2-403c-97b9-b1d28b25279", "row_index": 496, "timestamp": "2019-08-21T13:47:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1984, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb4717b-0dd2-403c-97b9-b1d28b25279", "eventTime": "2019-08-21T13:47:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 7bzW2NeyvfMCqYWfbZBXBVmHU6xByDtadEfANL6bUk391fay0g7nH1KLEKw1cdauBgoVoOLLWNo7n0S5_3rKz9dkyERdBe7wdmUoqj1v2ekbfA4OY8xIxKH9d61Km76qzv43zH1PqGMez1ABWlJ8C8Nl8AUAYaybSCqFQT34UPXpH_CnEq5XKAMmqinsVJENGLSTBOmSdVvIhKuv0Yp9fYTzvhWtFAVeGqkZU8cuslFeWmM4zRf33btm_0Y0Vzt7EbyjyQL3fxySN4FgWQKy8UGZK8tg2EXbFXpBU4jQbvCPcDM_9zVCq8pNhReyO6N8wBtokYEpre_HjhjJZhkGIytBNO0JG8YXvWL9Ji7iyTWvHLvK87F6iXJW7vFzYLjQIoDbYc6qMwx0g_1DKOxUp_5NrVJxJhRMRCB7b6zPFaUAuPvJ2pzwSctw6Sky5l9Xd7GaM4Qu5g781qtBqqAGOxdzyDIxHYEB4n-iaFQ6Av62LYm5Ba-yRpQx6H1Sucw0SmaX4p0lRDLzasbJFLDdDvhNuExurmJ9tiOJL5_CutiapfvmlVsMZ09ihw5E2gvuOsQ5FPaO5UmWhWazb5WSQS6XMJD3EkvGZuAXFnMdslnC7k2fIXcdkgI0olbI5h5XhX_N6aMVKonEJakjxQLjVC7uLKXIMLg-", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e1484f-222e-4c90-83e9-94b0b4953ef3", "record_id": "flaws_cloudtrail:0000497:a2e1484f-222e-4c90-83e9-94b0b4953ef3", "row_index": 497, "timestamp": "2019-08-21T13:47:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e1484f-222e-4c90-83e9-94b0b4953ef3", "eventTime": "2019-08-21T13:47:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a33a87e-9110-44f4-a54a-647b9a84460f", "record_id": "flaws_cloudtrail:0000498:4a33a87e-9110-44f4-a54a-647b9a84460f", "row_index": 498, "timestamp": "2019-08-21T13:47:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1949, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a33a87e-9110-44f4-a54a-647b9a84460f", "eventTime": "2019-08-21T13:47:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: c-jqm6I6bj2WQe-XKkEm2_R9Jy9QEGMT_ZddSONM8srnUZLuqAyQQJo6QK4CBezmwLrvG1VP98IPUxmtSjv1C9SYM4TsYU16GdH_b9XqDWLXvqwukibTQN1rnEKvHxtSkLZKV8Q3nkxWab-tYz1F6g_zSQQTM8VO7gbmT_xgK2d4y8j2tQKpb6Hq_5c7M8pR29SvMLx7JKgW0SiC3EDgOhNDePwHb8sI9ZDnfWhMluI6x_yDV7_A_taMaSSID2kQoWN5EBAWkds7elSHMMx6MczUU6T9XmFYbr0wlWjQGJ3516Zb0IWB03od9FVH-yg9ZAenzQiQonG3p54lhTU1WcmVPQIeGIukNn1iIcNMRdTd1LOMJ_WXjpQVcgoLh-pmDcBq9R_6gOu9AjTwUsYD9dg_HzoSktFab3EsW2_3ZRfhXZwVBX9G7UDSrxtyXvQusbNJNM8TAki8P3YaIWfwRNu9lV8DW7lTUfHc9Q85D5TvjWiTqB7yubEaXL3J90pjvQjEbXleTf--_koAxfByK_Gn5fQDujvt64bNTuQNo9U6dNp2reMspGv0IXGCGHd5ehiF8Pw6JdjRJCnW-tHS08J-P5Zh-nRBGJGnj1Qdzr-BmuZeThDGHu6bo0Uoo2WJLfhPcDzKzwLqivA6SPGtaAjTQyQEL1qPHlUm", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cb4717b-0dd2-403c-97b9-b1d28b25279", "record_id": "flaws_cloudtrail:0000499:8cb4717b-0dd2-403c-97b9-b1d28b25279", "row_index": 499, "timestamp": "2019-08-21T13:47:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1984, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cb4717b-0dd2-403c-97b9-b1d28b25279", "eventTime": "2019-08-21T13:47:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 7bzW2NeyvfMCqYWfbZBXBVmHU6xByDtadEfANL6bUk391fay0g7nH1KLEKw1cdauBgoVoOLLWNo7n0S5_3rKz9dkyERdBe7wdmUoqj1v2ekbfA4OY8xIxKH9d61Km76qzv43zH1PqGMez1ABWlJ8C8Nl8AUAYaybSCqFQT34UPXpH_CnEq5XKAMmqinsVJENGLSTBOmSdVvIhKuv0Yp9fYTzvhWtFAVeGqkZU8cuslFeWmM4zRf33btm_0Y0Vzt7EbyjyQL3fxySN4FgWQKy8UGZK8tg2EXbFXpBU4jQbvCPcDM_9zVCq8pNhReyO6N8wBtokYEpre_HjhjJZhkGIytBNO0JG8YXvWL9Ji7iyTWvHLvK87F6iXJW7vFzYLjQIoDbYc6qMwx0g_1DKOxUp_5NrVJxJhRMRCB7b6zPFaUAuPvJ2pzwSctw6Sky5l9Xd7GaM4Qu5g781qtBqqAGOxdzyDIxHYEB4n-iaFQ6Av62LYm5Ba-yRpQx6H1Sucw0SmaX4p0lRDLzasbJFLDdDvhNuExurmJ9tiOJL5_CutiapfvmlVsMZ09ihw5E2gvuOsQ5FPaO5UmWhWazb5WSQS6XMJD3EkvGZuAXFnMdslnC7k2fIXcdkgI0olbI5h5XhX_N6aMVKonEJakjxQLjVC7uLKXIMLg-", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2e1484f-222e-4c90-83e9-94b0b4953ef3", "record_id": "flaws_cloudtrail:0000500:a2e1484f-222e-4c90-83e9-94b0b4953ef3", "row_index": 500, "timestamp": "2019-08-21T13:47:18Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2e1484f-222e-4c90-83e9-94b0b4953ef3", "eventTime": "2019-08-21T13:47:18Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3f9ba5f-6646-4b41-9f12-75549d168c3e", "record_id": "flaws_cloudtrail:0000501:e3f9ba5f-6646-4b41-9f12-75549d168c3e", "row_index": 501, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3f9ba5f-6646-4b41-9f12-75549d168c3e", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b88790c-e484-4ee3-9172-aac11c4b31dc", "record_id": "flaws_cloudtrail:0000502:b88790c-e484-4ee3-9172-aac11c4b31dc", "row_index": 502, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1396, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b88790c-e484-4ee3-9172-aac11c4b31dc", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14f49dbf-e281-455f-855e-497cd3e397bd", "record_id": "flaws_cloudtrail:0000503:14f49dbf-e281-455f-855e-497cd3e397bd", "row_index": 503, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1850, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14f49dbf-e281-455f-855e-497cd3e397bd", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GITMQEKnVRVzZ2xBY9bHo4Z_jUNxPXHN1YlQ9FbLwnmLpdGgXDZN-5Iw0J2w_Cz_AlKaig4GV0R-jQYf4iaHOcGIh0O2HGg0_8G5MaHpUszm4ek8y2Cz2Bg3pd0D9KuhhZoiQNYFkad_n__MMIkbZ9X6VGvt4Csf9Zq4BODW1LySZ-BOTPeWk5wiwQG1UgGJmtIWwaZY5Z82WJLkfT6ZGCp7CINVECMvFi1YPGJiw-xH8SRec6ckRyP1TFTEcbQVZsiZ9ybX0p-voVgRJ8popX49zNRstoePk6zye-acmTmJRojOcrW54Yc5a8gu-wffkwsV5cofTHeQx9Im-uOI-1WlXdL2r616NLm3Q0TU4yntc-z0Fjf1TvR93XZ3o8f_c7sCP6YMTzdH7viH7s8CvnEGm_tgnfl4Tozewlmk_ez5qlV7nJ1ybYTE_6Yzvf_FrDf0IV5H9ugB-duWIcouZ8yXjsslZ8BXylO4dQRi7HIANTS5IwFElqvslUa9tGKLFh8x3wE2Ds_bIAwJBlAbHHM7ruZx5mne0iAYRwwGdIas4XV1vZQ-cKqe-F_9J9Qjaqm0QopTEcFXEuiRbuBiDbbfsMRTxyx9W5s9a52weTCkhwVP2N7UPoBJmiPIa1B1PMAr3eBUYOhuZ3UvuuhseJh53wOvmKg1a5rw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d060022-228d-4263-90c7-2a7144fcbd5d", "record_id": "flaws_cloudtrail:0000504:e0d060022-228d-4263-90c7-2a7144fcbd5d", "row_index": 504, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1851, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d060022-228d-4263-90c7-2a7144fcbd5d", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: PQZGJkHPt7bVu2mk2StXkYjxirg-7YfwVNUzJTABg8IuGL6GV1OwnhI-hq6MT5G8Z5AQ4WpHHQciLwh9mx88-DPK-mf4tp8t5ys3hsdL9PC8F5cwttuzpgXNXnzrMaoQmn08HRcGx6CFWUsnYH6h8oSn2r5YY4i2PAUwPI_XNEjCQBzyj0sf_kgq_tWvmzteu9OhGcc28DHyMWo1spdVinjrHf0eNahhEsk94fgAwCzJ8LAhpu71-z7zWjgDEQpc5H2q_ul4qLHwZfV16qo7mdvycYVqfPJlbnPGJV6M7KRxPH1d5tsVZjRX0hXgrUNP4_OWyPEFOUi8RzX-Ut8IeHqKgDe6mq3zArcAN2d2KPgZ8iAHgzKhgDvuSThA7828YeAGfgct3dxM08KMZF1DzrG69i4p4KK9wFn5Fe3vlZCs0nLJTNkko5SfqOCi2fDg39cfTu_FMN0cfYe-usyMFzVCBcVfBpvSRMNb3-XKW4MVefUeVOlzKuvI2fxjcPEE3yp6-EQoBNMwFE49gshMgdp2ydvynqMweh6Py9paH0krZ2OKafT1U3ZEOjki6DTiLA2Om9S58kqIHUYoVZVe1YdWxs8fFTwj0N5I3wWLau_bGc9p53YkE--X-4tsWTS7iXXJEzwgbN1frRxazHS45wwowDf7ueK5nWo", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3af5a12-a296-4c2a-95a4-3c1c2daa8b1f", "record_id": "flaws_cloudtrail:0000505:f3af5a12-a296-4c2a-95a4-3c1c2daa8b1f", "row_index": 505, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1851, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3af5a12-a296-4c2a-95a4-3c1c2daa8b1f", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H0IUKzowu_ouBoUHM4H6-5GPHeMG9nalyimi8H_uyW4vaHAQlJwmXF_Jsv0XP-tCS50K9zpXgpQxp3k9gJXsSOyQOSaY4ieTTWLQH1lthemdXNlYXTM-59dXZRdBPS780XVRL6oSQNpoutlcMRi13SjvFxC1fVmqVImVWe76H99LoHZ1M14bNQ0f3jnMmNLHNahmJ1rLvzqLLtkRCbZcKKGm9TXrFOoYcQ9vrYx594GMKKop8gBm4HvGVx58vnLi3NhvLfaQsQIMbLrykj13RBka3miMwr2YjzFBsZBG7_ffy6oijV4UTxy9A1667z9uIpX6JSYH2R-MQgOP9Eu6f521sIuB0M-rGmyT_l314gWOo0-mRmlqRhosga-c0yg13tAUcNhk43BaZwNAB-lwo3hodX-JES0SPYpuZXAIjbqIkZgs9Pw0r1okJEXOcZLCeLYT0Y99NTOBy5PlRAVtxXzt8I_uukrcqlVn7P_WT3NanIk1Qv_UTt2ZLpTC_P-tGboH8YFMWf6o4ND7pz7p4RcyNtqUduWq99cT5pRUKE2xEN8h-N30HTK6l2Iw9DyGO1udpxEyAnDoH4_hqEDJ2GrlHBCz81etn1dWL9trYo3LloaR34XAH92zA7_Pd3HH3Z_J_tvv2Vb0lt-xxPbv9vUjw0MEHAg5TDF0", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bf9ee43-65ce-421a-8419-fba779ddf538", "record_id": "flaws_cloudtrail:0000506:8bf9ee43-65ce-421a-8419-fba779ddf538", "row_index": 506, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bf9ee43-65ce-421a-8419-fba779ddf538", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "770b1796-4283-4932-a5b8-fe9e8264c72d", "record_id": "flaws_cloudtrail:0000507:770b1796-4283-4932-a5b8-fe9e8264c72d", "row_index": 507, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1983, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "770b1796-4283-4932-a5b8-fe9e8264c72d", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 33YiEdCAp44jOUmC0xxQTbsTPlalOrgikFKy_Eqzk4oDjbkQDFWKXppPJ2GRj0qSUc4BZJyaezFfHPPX7sLszGPYTfhrX7bNusbKiES9WtXVGWi4DLrScpsp586i8_mpS6mjOEAO8p-op6YVAN_8p2mVG66Qt92oKIK9Qznshs1TBMDIwkj89On3S6gEgvEFJMzMpUjPA3x9ajILCrF8Gsn3M53lbdyqbk2hSwB4rC_lAYAwKcZfv_alc9aKaDoKdpofWdmzryHsCV46M5PIlyVdR_7XHFKHBzSi0E0zZq7Ql57s8FRwkvMgzXdiMtARerY-UJ_DTH5KAoqfsBWta0lB-t5ONzRN47RkML9QPhTcBXVrKRMOxCjqLqm_5eYHYrHg1V1baEz9j3Z5IuBjg4mxoWpoMZ3LkgdKDSqQEQ5ZcNQzNzYI2IsUBSdfvzOxZyZHK3IMROxmHb7MjTy3GuyJxn9c55gAXBsV8ACH4FMwG0BPbXObzLFNUmpg1BF3WFuGH5tgneviptuMyNBnaQAECEjtqVqMxfU6VklJMr8GjE_OuuI9DvpyKmwubJq-agbD7q0yEP_Y0ADG9XArTZZpGjE3JAykAYevxUkfgu5LErtLGhHpHLn5hjytsmoVZ_-mRClzgb0z4nSm3DaQAb-uUwJjSaM", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3f9ba5f-6646-4b41-9f12-75549d168c3e", "record_id": "flaws_cloudtrail:0000508:e3f9ba5f-6646-4b41-9f12-75549d168c3e", "row_index": 508, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3f9ba5f-6646-4b41-9f12-75549d168c3e", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b88790c-e484-4ee3-9172-aac11c4b31dc", "record_id": "flaws_cloudtrail:0000509:b88790c-e484-4ee3-9172-aac11c4b31dc", "row_index": 509, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1396, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b88790c-e484-4ee3-9172-aac11c4b31dc", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14f49dbf-e281-455f-855e-497cd3e397bd", "record_id": "flaws_cloudtrail:0000510:14f49dbf-e281-455f-855e-497cd3e397bd", "row_index": 510, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1850, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14f49dbf-e281-455f-855e-497cd3e397bd", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: GITMQEKnVRVzZ2xBY9bHo4Z_jUNxPXHN1YlQ9FbLwnmLpdGgXDZN-5Iw0J2w_Cz_AlKaig4GV0R-jQYf4iaHOcGIh0O2HGg0_8G5MaHpUszm4ek8y2Cz2Bg3pd0D9KuhhZoiQNYFkad_n__MMIkbZ9X6VGvt4Csf9Zq4BODW1LySZ-BOTPeWk5wiwQG1UgGJmtIWwaZY5Z82WJLkfT6ZGCp7CINVECMvFi1YPGJiw-xH8SRec6ckRyP1TFTEcbQVZsiZ9ybX0p-voVgRJ8popX49zNRstoePk6zye-acmTmJRojOcrW54Yc5a8gu-wffkwsV5cofTHeQx9Im-uOI-1WlXdL2r616NLm3Q0TU4yntc-z0Fjf1TvR93XZ3o8f_c7sCP6YMTzdH7viH7s8CvnEGm_tgnfl4Tozewlmk_ez5qlV7nJ1ybYTE_6Yzvf_FrDf0IV5H9ugB-duWIcouZ8yXjsslZ8BXylO4dQRi7HIANTS5IwFElqvslUa9tGKLFh8x3wE2Ds_bIAwJBlAbHHM7ruZx5mne0iAYRwwGdIas4XV1vZQ-cKqe-F_9J9Qjaqm0QopTEcFXEuiRbuBiDbbfsMRTxyx9W5s9a52weTCkhwVP2N7UPoBJmiPIa1B1PMAr3eBUYOhuZ3UvuuhseJh53wOvmKg1a5rw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d060022-228d-4263-90c7-2a7144fcbd5d", "record_id": "flaws_cloudtrail:0000511:e0d060022-228d-4263-90c7-2a7144fcbd5d", "row_index": 511, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1851, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d060022-228d-4263-90c7-2a7144fcbd5d", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: PQZGJkHPt7bVu2mk2StXkYjxirg-7YfwVNUzJTABg8IuGL6GV1OwnhI-hq6MT5G8Z5AQ4WpHHQciLwh9mx88-DPK-mf4tp8t5ys3hsdL9PC8F5cwttuzpgXNXnzrMaoQmn08HRcGx6CFWUsnYH6h8oSn2r5YY4i2PAUwPI_XNEjCQBzyj0sf_kgq_tWvmzteu9OhGcc28DHyMWo1spdVinjrHf0eNahhEsk94fgAwCzJ8LAhpu71-z7zWjgDEQpc5H2q_ul4qLHwZfV16qo7mdvycYVqfPJlbnPGJV6M7KRxPH1d5tsVZjRX0hXgrUNP4_OWyPEFOUi8RzX-Ut8IeHqKgDe6mq3zArcAN2d2KPgZ8iAHgzKhgDvuSThA7828YeAGfgct3dxM08KMZF1DzrG69i4p4KK9wFn5Fe3vlZCs0nLJTNkko5SfqOCi2fDg39cfTu_FMN0cfYe-usyMFzVCBcVfBpvSRMNb3-XKW4MVefUeVOlzKuvI2fxjcPEE3yp6-EQoBNMwFE49gshMgdp2ydvynqMweh6Py9paH0krZ2OKafT1U3ZEOjki6DTiLA2Om9S58kqIHUYoVZVe1YdWxs8fFTwj0N5I3wWLau_bGc9p53YkE--X-4tsWTS7iXXJEzwgbN1frRxazHS45wwowDf7ueK5nWo", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3af5a12-a296-4c2a-95a4-3c1c2daa8b1f", "record_id": "flaws_cloudtrail:0000512:f3af5a12-a296-4c2a-95a4-3c1c2daa8b1f", "row_index": 512, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1851, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3af5a12-a296-4c2a-95a4-3c1c2daa8b1f", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: H0IUKzowu_ouBoUHM4H6-5GPHeMG9nalyimi8H_uyW4vaHAQlJwmXF_Jsv0XP-tCS50K9zpXgpQxp3k9gJXsSOyQOSaY4ieTTWLQH1lthemdXNlYXTM-59dXZRdBPS780XVRL6oSQNpoutlcMRi13SjvFxC1fVmqVImVWe76H99LoHZ1M14bNQ0f3jnMmNLHNahmJ1rLvzqLLtkRCbZcKKGm9TXrFOoYcQ9vrYx594GMKKop8gBm4HvGVx58vnLi3NhvLfaQsQIMbLrykj13RBka3miMwr2YjzFBsZBG7_ffy6oijV4UTxy9A1667z9uIpX6JSYH2R-MQgOP9Eu6f521sIuB0M-rGmyT_l314gWOo0-mRmlqRhosga-c0yg13tAUcNhk43BaZwNAB-lwo3hodX-JES0SPYpuZXAIjbqIkZgs9Pw0r1okJEXOcZLCeLYT0Y99NTOBy5PlRAVtxXzt8I_uukrcqlVn7P_WT3NanIk1Qv_UTt2ZLpTC_P-tGboH8YFMWf6o4ND7pz7p4RcyNtqUduWq99cT5pRUKE2xEN8h-N30HTK6l2Iw9DyGO1udpxEyAnDoH4_hqEDJ2GrlHBCz81etn1dWL9trYo3LloaR34XAH92zA7_Pd3HH3Z_J_tvv2Vb0lt-xxPbv9vUjw0MEHAg5TDF0", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bf9ee43-65ce-421a-8419-fba779ddf538", "record_id": "flaws_cloudtrail:0000513:8bf9ee43-65ce-421a-8419-fba779ddf538", "row_index": 513, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bf9ee43-65ce-421a-8419-fba779ddf538", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "770b1796-4283-4932-a5b8-fe9e8264c72d", "record_id": "flaws_cloudtrail:0000514:770b1796-4283-4932-a5b8-fe9e8264c72d", "row_index": 514, "timestamp": "2019-08-21T13:47:19Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1983, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "770b1796-4283-4932-a5b8-fe9e8264c72d", "eventTime": "2019-08-21T13:47:19Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 33YiEdCAp44jOUmC0xxQTbsTPlalOrgikFKy_Eqzk4oDjbkQDFWKXppPJ2GRj0qSUc4BZJyaezFfHPPX7sLszGPYTfhrX7bNusbKiES9WtXVGWi4DLrScpsp586i8_mpS6mjOEAO8p-op6YVAN_8p2mVG66Qt92oKIK9Qznshs1TBMDIwkj89On3S6gEgvEFJMzMpUjPA3x9ajILCrF8Gsn3M53lbdyqbk2hSwB4rC_lAYAwKcZfv_alc9aKaDoKdpofWdmzryHsCV46M5PIlyVdR_7XHFKHBzSi0E0zZq7Ql57s8FRwkvMgzXdiMtARerY-UJ_DTH5KAoqfsBWta0lB-t5ONzRN47RkML9QPhTcBXVrKRMOxCjqLqm_5eYHYrHg1V1baEz9j3Z5IuBjg4mxoWpoMZ3LkgdKDSqQEQ5ZcNQzNzYI2IsUBSdfvzOxZyZHK3IMROxmHb7MjTy3GuyJxn9c55gAXBsV8ACH4FMwG0BPbXObzLFNUmpg1BF3WFuGH5tgneviptuMyNBnaQAECEjtqVqMxfU6VklJMr8GjE_OuuI9DvpyKmwubJq-agbD7q0yEP_Y0ADG9XArTZZpGjE3JAykAYevxUkfgu5LErtLGhHpHLn5hjytsmoVZ_-mRClzgb0z4nSm3DaQAb-uUwJjSaM", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4e149f9-e0ce-4720-acbf-c2aaea60159e", "record_id": "flaws_cloudtrail:0000515:c4e149f9-e0ce-4720-acbf-c2aaea60159e", "row_index": 515, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1208, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4e149f9-e0ce-4720-acbf-c2aaea60159e", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "065861f3c-6029-4e75-9b31-215a4c24197", "record_id": "flaws_cloudtrail:0000516:065861f3c-6029-4e75-9b31-215a4c24197", "row_index": 516, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "065861f3c-6029-4e75-9b31-215a4c24197", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c033688d-130a-4c76-a419-4ce7ce1b8098", "record_id": "flaws_cloudtrail:0000517:c033688d-130a-4c76-a419-4ce7ce1b8098", "row_index": 517, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c033688d-130a-4c76-a419-4ce7ce1b8098", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46693-abd5-4e82-a0f0-b81dba29a024", "record_id": "flaws_cloudtrail:0000518:46693-abd5-4e82-a0f0-b81dba29a024", "row_index": 518, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1294, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46693-abd5-4e82-a0f0-b81dba29a024", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3490b9f0-db45-42f6-9fd7-d6d98f2ae643", "record_id": "flaws_cloudtrail:0000519:3490b9f0-db45-42f6-9fd7-d6d98f2ae643", "row_index": 519, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3490b9f0-db45-42f6-9fd7-d6d98f2ae643", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4e149f9-e0ce-4720-acbf-c2aaea60159e", "record_id": "flaws_cloudtrail:0000520:c4e149f9-e0ce-4720-acbf-c2aaea60159e", "row_index": 520, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1208, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4e149f9-e0ce-4720-acbf-c2aaea60159e", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "065861f3c-6029-4e75-9b31-215a4c24197", "record_id": "flaws_cloudtrail:0000521:065861f3c-6029-4e75-9b31-215a4c24197", "row_index": 521, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "065861f3c-6029-4e75-9b31-215a4c24197", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c033688d-130a-4c76-a419-4ce7ce1b8098", "record_id": "flaws_cloudtrail:0000522:c033688d-130a-4c76-a419-4ce7ce1b8098", "row_index": 522, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c033688d-130a-4c76-a419-4ce7ce1b8098", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46693-abd5-4e82-a0f0-b81dba29a024", "record_id": "flaws_cloudtrail:0000523:46693-abd5-4e82-a0f0-b81dba29a024", "row_index": 523, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1294, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46693-abd5-4e82-a0f0-b81dba29a024", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3490b9f0-db45-42f6-9fd7-d6d98f2ae643", "record_id": "flaws_cloudtrail:0000524:3490b9f0-db45-42f6-9fd7-d6d98f2ae643", "row_index": 524, "timestamp": "2019-08-21T13:47:20Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3490b9f0-db45-42f6-9fd7-d6d98f2ae643", "eventTime": "2019-08-21T13:47:20Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff5d570a-fd74-49df-ae90-84a899819cc", "record_id": "flaws_cloudtrail:0000525:ff5d570a-fd74-49df-ae90-84a899819cc", "row_index": 525, "timestamp": "2019-08-21T13:47:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1851, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff5d570a-fd74-49df-ae90-84a899819cc", "eventTime": "2019-08-21T13:47:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cMDL6SEfMMIg61wXPojyOCeLR4s9t7dkTL0VsvGTh2lKtKfdU3UK_G-Qovmercc4h1ZXKF8Nim9UqyHV50Y6m5M6wCxMETuJsbILXCYav3QMA18e0jOgc8c29C67k94VOcQ_r32vYXNpko0lBCrLt7HcyCtJKsAteFcPpEsRBKFj_3m2PNIVSErDK26utI-lLTMo4--2COJHL6pxdiO-Ei0gX13KLfn1X2PB0UGJ_D2imoc1pC5N7qmpyAkoEgtgL0f5Rdn13eEv24SAreC4UFIhw2H2EtJIzDnsz_3vSfMR6PVAqagU0DlyFknMteXxbhhhalu6M84-CxPoaCg-X5H-YAIAmVOzFpaRslkL9Deczr1JBUCk20pHEM3lzLBR4G8K9XoWF7fQYJUS5T1gwEj_FnTSKCJp9GVCySgNbpc_8sogh27sgwg3X1dmLwxt4qehkrICE0g4z44zTbss58RPpn9WZhkw6TjrTejXWX8sNbLyYqNWUxHeqoJsmvlZnDPxjaa79H17QaGkqG4U9typvfL_a7afzHNNf_32uSH6UD78CnuaLHDkyj6eXUSoFepFoDSlOBja85WX9iXurCIZrN_mO6hDk0pSZSEUum885qkPWPq4WC4PnFWkStSAqKNgtbxVBm8nATUut3apCyFtOnx9ds5YceP3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4640e6d-30a4-42d6-ab88-1b12c5d112320", "record_id": "flaws_cloudtrail:0000526:b4640e6d-30a4-42d6-ab88-1b12c5d112320", "row_index": 526, "timestamp": "2019-08-21T13:47:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1294, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4640e6d-30a4-42d6-ab88-1b12c5d112320", "eventTime": "2019-08-21T13:47:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff5d570a-fd74-49df-ae90-84a899819cc", "record_id": "flaws_cloudtrail:0000527:ff5d570a-fd74-49df-ae90-84a899819cc", "row_index": 527, "timestamp": "2019-08-21T13:47:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1851, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff5d570a-fd74-49df-ae90-84a899819cc", "eventTime": "2019-08-21T13:47:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: cMDL6SEfMMIg61wXPojyOCeLR4s9t7dkTL0VsvGTh2lKtKfdU3UK_G-Qovmercc4h1ZXKF8Nim9UqyHV50Y6m5M6wCxMETuJsbILXCYav3QMA18e0jOgc8c29C67k94VOcQ_r32vYXNpko0lBCrLt7HcyCtJKsAteFcPpEsRBKFj_3m2PNIVSErDK26utI-lLTMo4--2COJHL6pxdiO-Ei0gX13KLfn1X2PB0UGJ_D2imoc1pC5N7qmpyAkoEgtgL0f5Rdn13eEv24SAreC4UFIhw2H2EtJIzDnsz_3vSfMR6PVAqagU0DlyFknMteXxbhhhalu6M84-CxPoaCg-X5H-YAIAmVOzFpaRslkL9Deczr1JBUCk20pHEM3lzLBR4G8K9XoWF7fQYJUS5T1gwEj_FnTSKCJp9GVCySgNbpc_8sogh27sgwg3X1dmLwxt4qehkrICE0g4z44zTbss58RPpn9WZhkw6TjrTejXWX8sNbLyYqNWUxHeqoJsmvlZnDPxjaa79H17QaGkqG4U9typvfL_a7afzHNNf_32uSH6UD78CnuaLHDkyj6eXUSoFepFoDSlOBja85WX9iXurCIZrN_mO6hDk0pSZSEUum885qkPWPq4WC4PnFWkStSAqKNgtbxVBm8nATUut3apCyFtOnx9ds5YceP3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4640e6d-30a4-42d6-ab88-1b12c5d112320", "record_id": "flaws_cloudtrail:0000528:b4640e6d-30a4-42d6-ab88-1b12c5d112320", "row_index": 528, "timestamp": "2019-08-21T13:47:21Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1294, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4640e6d-30a4-42d6-ab88-1b12c5d112320", "eventTime": "2019-08-21T13:47:21Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "563fe7c5-490b-441e-ae33-5d3dcf515b5c", "record_id": "flaws_cloudtrail:0000529:563fe7c5-490b-441e-ae33-5d3dcf515b5c", "row_index": 529, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1398, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "563fe7c5-490b-441e-ae33-5d3dcf515b5c", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e220c8d-e7ce-4648-918a-20d0efc67f50", "record_id": "flaws_cloudtrail:0000530:7e220c8d-e7ce-4648-918a-20d0efc67f50", "row_index": 530, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e220c8d-e7ce-4648-918a-20d0efc67f50", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bce2c817-7e5a-49c2-88d5-e450131e06568", "record_id": "flaws_cloudtrail:0000531:bce2c817-7e5a-49c2-88d5-e450131e06568", "row_index": 531, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bce2c817-7e5a-49c2-88d5-e450131e06568", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b254bfa6-7e9e-4fd1-a885-9b755494d1414", "record_id": "flaws_cloudtrail:0000532:b254bfa6-7e9e-4fd1-a885-9b755494d1414", "row_index": 532, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b254bfa6-7e9e-4fd1-a885-9b755494d1414", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZTK3srDLtf0fuKAeCzPkdCtmqtLZbJcxh8uGPUnYbrwNBHyvBTH80yjXMcKunRez-CoDdieko192xfqPY9BTOQWlSPyuITXop_j98x8X11D76hIXIbqPNkzqHLjbunOVVtlIjVdeX04aLA_1upe-LK0pqHM_oxG7cgZ0-TyUPx0F62aveBMbO-4ip4b7hF0KwpX6bpFx3IcidUlX67PSEnDkERrbmMo_17j2QpxFAfKUqKe9cU8cWET1lozxA0pXxeb5rh2QmtzmHq50rutQEKyiKMCk_d33CcEflk0pxpy2T4SW6yRcwgL2A57xZG1xtHivBUFPVdODryi-ulrxODzKmjOGBgQoaJyfsf0SGJNZeT5vqsCKeuQuJvv4jEVHoCExLW8rMV0Zcb3GWwJZ0vzv_8IQ6ZzinWL8HT6dFWb-7N5f_swlVehd0zImub_kozbLIsw1jAEu2FdQl13XhleLYoghWFgaUZmHDr3jYPJ-WhEH3Xc1lhqVSuVdAu94Yg3_PSwzPcO2iPupKjRXhs-sCSiHsMsyrO-lPqj2Xu74CHPiGy76KFC5bC2EC8aK-7r7Hjm07AMCgydOGEiQDrZasCjZDff9qQGx1AL64cRvmEatv7ag2LnbFzuYEU3RQ3WOuSnquA59yFLv6hcmvnxqo8pR1STP6A6fbg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6800d7da-852b-4cb9-8d27-5efb700961", "record_id": "flaws_cloudtrail:0000533:6800d7da-852b-4cb9-8d27-5efb700961", "row_index": 533, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1297, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6800d7da-852b-4cb9-8d27-5efb700961", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2999fa4-b83f-4e50-9cd6-5fd56f3cbe66", "record_id": "flaws_cloudtrail:0000534:a2999fa4-b83f-4e50-9cd6-5fd56f3cbe66", "row_index": 534, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2999fa4-b83f-4e50-9cd6-5fd56f3cbe66", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "563fe7c5-490b-441e-ae33-5d3dcf515b5c", "record_id": "flaws_cloudtrail:0000535:563fe7c5-490b-441e-ae33-5d3dcf515b5c", "row_index": 535, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1398, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "563fe7c5-490b-441e-ae33-5d3dcf515b5c", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e220c8d-e7ce-4648-918a-20d0efc67f50", "record_id": "flaws_cloudtrail:0000536:7e220c8d-e7ce-4648-918a-20d0efc67f50", "row_index": 536, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1298, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e220c8d-e7ce-4648-918a-20d0efc67f50", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bce2c817-7e5a-49c2-88d5-e450131e06568", "record_id": "flaws_cloudtrail:0000537:bce2c817-7e5a-49c2-88d5-e450131e06568", "row_index": 537, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bce2c817-7e5a-49c2-88d5-e450131e06568", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b254bfa6-7e9e-4fd1-a885-9b755494d1414", "record_id": "flaws_cloudtrail:0000538:b254bfa6-7e9e-4fd1-a885-9b755494d1414", "row_index": 538, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b254bfa6-7e9e-4fd1-a885-9b755494d1414", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ZTK3srDLtf0fuKAeCzPkdCtmqtLZbJcxh8uGPUnYbrwNBHyvBTH80yjXMcKunRez-CoDdieko192xfqPY9BTOQWlSPyuITXop_j98x8X11D76hIXIbqPNkzqHLjbunOVVtlIjVdeX04aLA_1upe-LK0pqHM_oxG7cgZ0-TyUPx0F62aveBMbO-4ip4b7hF0KwpX6bpFx3IcidUlX67PSEnDkERrbmMo_17j2QpxFAfKUqKe9cU8cWET1lozxA0pXxeb5rh2QmtzmHq50rutQEKyiKMCk_d33CcEflk0pxpy2T4SW6yRcwgL2A57xZG1xtHivBUFPVdODryi-ulrxODzKmjOGBgQoaJyfsf0SGJNZeT5vqsCKeuQuJvv4jEVHoCExLW8rMV0Zcb3GWwJZ0vzv_8IQ6ZzinWL8HT6dFWb-7N5f_swlVehd0zImub_kozbLIsw1jAEu2FdQl13XhleLYoghWFgaUZmHDr3jYPJ-WhEH3Xc1lhqVSuVdAu94Yg3_PSwzPcO2iPupKjRXhs-sCSiHsMsyrO-lPqj2Xu74CHPiGy76KFC5bC2EC8aK-7r7Hjm07AMCgydOGEiQDrZasCjZDff9qQGx1AL64cRvmEatv7ag2LnbFzuYEU3RQ3WOuSnquA59yFLv6hcmvnxqo8pR1STP6A6fbg", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6800d7da-852b-4cb9-8d27-5efb700961", "record_id": "flaws_cloudtrail:0000539:6800d7da-852b-4cb9-8d27-5efb700961", "row_index": 539, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1297, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6800d7da-852b-4cb9-8d27-5efb700961", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2999fa4-b83f-4e50-9cd6-5fd56f3cbe66", "record_id": "flaws_cloudtrail:0000540:a2999fa4-b83f-4e50-9cd6-5fd56f3cbe66", "row_index": 540, "timestamp": "2019-08-21T13:47:22Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2999fa4-b83f-4e50-9cd6-5fd56f3cbe66", "eventTime": "2019-08-21T13:47:22Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681ae3a5-ed63-4000-8977-849ca5b1955a", "record_id": "flaws_cloudtrail:0000541:681ae3a5-ed63-4000-8977-849ca5b1955a", "row_index": 541, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1950, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681ae3a5-ed63-4000-8977-849ca5b1955a", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: liF3HaQ4IUczJYfGB_cMXSR4Mv83XC0wJrqxq1lsjO8QKpEMh6wGe2q2TynDZFnn9dnlAAygJusEtKMcJO7oFH_H2bMHYeJkOXqnGxbVOEjYV5AQYR4itgeZO7FsNljCJrtcxc5I14UgJ8Rdbrvt9DWo3AEQ4inCp92P5vpH4j0sZo07hNsN2h8iLA90ee8x5myO3HvUuAhKk9RKHwJCdHwPs7w_2QczpvHkZx7yBOSfUcWS-I8Tvrkvz7PonrGUbdJc5tUjS75Dg4KOrYQ9COizMa3SCFfWi6IMImUgTRxGINiu3SjgsDByWxkHIQzvt1KzV4LAVH4F8AbhAQffcUKPhpVlUaEBtHb78N0ADhfDTKjRMe4Ll6ziLkCBDy0621-r188Enx-jLVYg64kR4HYIiqFryPQwjfoNHQcSZYZ9gIC-hI6eCsqBuaJX712em4QK0y8e0JXjtJHOeLU7ULITP8S3Dp7Odv03e869hwFo7ENts1x15gJJ43Obvkv3M4YNbV_iqrpKN1VWJMPZ7rzF1x6jqFQnDnS5SJW7sL-gF0b2gEQR9DooLbUpcjcH9gVl6t5wg_v05CLkdgl_rQwMlppSxuVSR32Q1fa_bpRKpwnvXxsELLgDpYiWkrE7fmgGZ2ndjdQcER282Xg1sdAFhmVkADv2a0yw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9ae8d78-78b2-4699-91d1-56c6613dad29", "record_id": "flaws_cloudtrail:0000542:d9ae8d78-78b2-4699-91d1-56c6613dad29", "row_index": 542, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9ae8d78-78b2-4699-91d1-56c6613dad29", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de3915af-962d-43d8-b045-3931e4c2d5ce", "record_id": "flaws_cloudtrail:0000543:de3915af-962d-43d8-b045-3931e4c2d5ce", "row_index": 543, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de3915af-962d-43d8-b045-3931e4c2d5ce", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d90ce9e-29f1-4dd9-bb1d-78cd2a0e48e2", "record_id": "flaws_cloudtrail:0000544:7d90ce9e-29f1-4dd9-bb1d-78cd2a0e48e2", "row_index": 544, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1951, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d90ce9e-29f1-4dd9-bb1d-78cd2a0e48e2", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: DWrjfLFAacnw71enpOzerju3s_o4iXCMxJOxjTXWnPpaUpYV1A-dE88GwtfcWYFD3YWAcnjGA0Dsg2wPAsOK5gcqJuUp5G_LCo0SrQuuMoAdgm64E1DOWh-2tcVG1nri-pzxPDiYpXx3uM48kdliypXJzA-vPf0MFjxo1qk8i2W_Sf48qtgB29_2woxWj9L7mBwq7PZQpu8hnTM4oaaQKZn_wbsrPPqBn52_vhjdcNTleC1q0QJL6Wup3dWe449RlcgYlIZG_77DD98tA6MXgBRACRvFx9NAzH0Te00V87kZ5JJX42nv8WEP7NRdfgaXSVG-mMQMtpEhHe8AVZTO2T7QdyLmEbL987odNg8KwfURFBStoR88oCQWKvLJ03eHj42i41s7MqT689sIqOpNVzCpsUEjR4KJYd83FBX7y2OkPHhCn-nmy97wUH8gPy-NxGswqFFqlmx8O8Um_P_G21xABHQj1qWK2yqBzNjMV9iveSFhpoo75KyCovMR_0OcWUo-IIRjdt2dEdAxsw7BVFOuXFgSvRmVFkS3JSF-GsKpc3TxW3ynkIeWfWu2SeJbZL062esK7CyX6rd-mdkLu0tO1SCJ6UHztxkjcgujsHiWuzAgdAJTi2TQ1lAzEBDqU1uCcc5vJ4Eh0ErGj1fNM9hkI-5RigWHzHFiUw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91baff6f-67cb-400e-ac46-70d9ec690341e", "record_id": "flaws_cloudtrail:0000545:91baff6f-67cb-400e-ac46-70d9ec690341e", "row_index": 545, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1300, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91baff6f-67cb-400e-ac46-70d9ec690341e", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37c40922-ee7c-4d87-9fdb-09ef68595dcc", "record_id": "flaws_cloudtrail:0000546:37c40922-ee7c-4d87-9fdb-09ef68595dcc", "row_index": 546, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1852, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37c40922-ee7c-4d87-9fdb-09ef68595dcc", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VAA-Uw1zMLMrpLjmpOaofdOSoZtwu7eWPDWzWygT6dgtNUAq2XwCl6eBQDAyWzbnwlu52vp5ecnh9lJJB1miU_NYmZAk3znv9d9KH1Y7JWfU-13I7dLbVPjsPm_R_JeiO3gJDNiXGjJ2cLxdrdQCNGNskrBcC2j_dlITGd-kVzenFAcJif9wz0O1OrzQP4hfOvYic3uvP529N5W-CCYmIEs0nmkJLAEDny-SuEVeXvNNznM8c1iO0v6iy9qsN1IUoNAOO2CrIGOMOktwnY2SkduWBkMbRbZ4abPwWX6Mpxoue_I5q_PI9ZJgOZggFLncJzww1_LA55vAqCXfq5zJngfmhZzBy9sPMs5acx20Y1EbqPIbUGtmWox-W3PV7jHlJOXkHVDWalKcMdradnThhQM6PN5uVCkAz4b9mLGQVrRYQqMTHqj1cXBnRmMg5-AsskgXOxXl2-8mT5n0Mxpb5ppr14pD-H2o5Ne_Oz9cfxFV0tXfCE9LA3Y46Sq-5HK_evQCO67HgA6yZmdnPymwIClxs8fqmIfe7AmfU0bFdVCMEfkkOs0eQx2f1SaZRDRBx82WE8mqcejfyUH5QYfaiZvyu9mji37ZdHhH8k8nQ-oM7gzpBBkolfSky321261W67YcOsTf4m1cqg_tTWJKLNX_jwgtZTk7Jtzh1QQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2944c4c3-fbe2-4c7d-a6b8-d836cdecaaa4", "record_id": "flaws_cloudtrail:0000547:2944c4c3-fbe2-4c7d-a6b8-d836cdecaaa4", "row_index": 547, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2944c4c3-fbe2-4c7d-a6b8-d836cdecaaa4", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a16ff02-37dc-4dfb-97c7-df5a760d3707", "record_id": "flaws_cloudtrail:0000548:4a16ff02-37dc-4dfb-97c7-df5a760d3707", "row_index": 548, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1292, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a16ff02-37dc-4dfb-97c7-df5a760d3707", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05cc3de2-1042-4f4a-8cba-b6b9b6f26897", "record_id": "flaws_cloudtrail:0000549:05cc3de2-1042-4f4a-8cba-b6b9b6f26897", "row_index": 549, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1985, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05cc3de2-1042-4f4a-8cba-b6b9b6f26897", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ewk4TbLnjIMnhNB4HixubMYDF7RLvsuDoB1vubrH0vrp7aRq-joH6L1r8ka-OzZToap-ePuVsgxdMF7JGCkflBbl8KhPZvLC2ZD_d9AbDd3h-9RlI2IkzIjOZGItvim5PYcvFXIv9blX-kXRh3uDdQbu4HBOPod34lN7HgX_Ow-zBskSi01pWcZMMuRrlkxhgQROBlJdYkW_kPkOO_iNYNOek4ugsHht7BXzvGydr1ghUsFEV12DFplwmLCmZR3VVb5U2f8KMQhJsQQGKz-uWoQug4eIltLQHazy-jS431NElDr6L0ShF-BqC7zQUqvAXyRRJBRZo9BH5Xkt19JMi6zZaNKBA3x5H_fcRhCjFkVVCWCyyL4IYFYTBr69kDZ1JZxQVFMH-RmX0pt-gVONfJHn-UiOvnQ9dQvMlXh7te55iz3LTOvUzsGsH5Uj-tAzTZtI2jzeGMalm4-gBIsWwFpAL1hxfZPEcut4dEQ_SiOgezYRr_41sHdP0kVUyA1iaEw7UySLTPzQyfkgr17r6Gav8d7thOt0NZqs0niHU1jzk77I8b1HNiWDqXrD2t3GtI9jZSx8jIx3IeUZX369xYurOqB5iMjo4V25UxzZ4LrE48zUI85vh7kFU8fDSzeRjN5k8VIg3FB3-NPbHJKzxJAn_RaTGi-D", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a1fd040-4277-48c9-a21b-26ad47caab02", "record_id": "flaws_cloudtrail:0000550:4a1fd040-4277-48c9-a21b-26ad47caab02", "row_index": 550, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a1fd040-4277-48c9-a21b-26ad47caab02", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Lzalq2trDzfdoH1jA-d42wrJwN9KrcK-yqw-CAhxxj7Pu7N57g6fTTO92QOw5jgCFfGy0PWf1L3AfdywhxVvnjwITaW1dgsnUAxYvASHa90j-EIj1GTdb0kLh97z4h9hOHhDrbo6dqmid2OeDajTCo1FEW1votnWLEP-6b_G_PClUJrI07kOIjwLKo2dbptU0fXJjyMcBpqUKeI804JgsbeDCIfyDpUlHXEJ8lkykDFMdZ_HE9GOiiSOVD7WSkmpSAs2MykxIJ8obLaeDXgFURmRyyxFJlpNi-X21Mm7qBFCoO0iFSEfBXNMZV7vFZmbsNorRXaqdvB6G9bj7Y_99PXn6nzqvqLNoV-w75esCae1q6YwrQpPMGnllYO2wqMac6n8woT_3zBOB5A8QHKeUbMXc4N8U5_bx7YO_QwZCFx61c0zTadE9sYyp82lgMT9T_JIW1wvaVNhxeFxTxeiTXtVUGpKh_SLtcbsOD30bo01sle1RpzykFgmBTrIh-32TTaUKwJbg_fX2TNbaJbhmRN9qi7KlUaoQJ0WcPp0LSsR5PiXGebUWxZbXrCWAY2Z0VJ_bjwsmzmCxG5u9fiZgWxmJs9qN7SmnQ2vinKX6rZJYiQ-ROCVFnZZdHyy9KUzDRsZfiSx_TaQm6EdiBZll1vpohJII1A", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681ae3a5-ed63-4000-8977-849ca5b1955a", "record_id": "flaws_cloudtrail:0000551:681ae3a5-ed63-4000-8977-849ca5b1955a", "row_index": 551, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1950, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681ae3a5-ed63-4000-8977-849ca5b1955a", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: liF3HaQ4IUczJYfGB_cMXSR4Mv83XC0wJrqxq1lsjO8QKpEMh6wGe2q2TynDZFnn9dnlAAygJusEtKMcJO7oFH_H2bMHYeJkOXqnGxbVOEjYV5AQYR4itgeZO7FsNljCJrtcxc5I14UgJ8Rdbrvt9DWo3AEQ4inCp92P5vpH4j0sZo07hNsN2h8iLA90ee8x5myO3HvUuAhKk9RKHwJCdHwPs7w_2QczpvHkZx7yBOSfUcWS-I8Tvrkvz7PonrGUbdJc5tUjS75Dg4KOrYQ9COizMa3SCFfWi6IMImUgTRxGINiu3SjgsDByWxkHIQzvt1KzV4LAVH4F8AbhAQffcUKPhpVlUaEBtHb78N0ADhfDTKjRMe4Ll6ziLkCBDy0621-r188Enx-jLVYg64kR4HYIiqFryPQwjfoNHQcSZYZ9gIC-hI6eCsqBuaJX712em4QK0y8e0JXjtJHOeLU7ULITP8S3Dp7Odv03e869hwFo7ENts1x15gJJ43Obvkv3M4YNbV_iqrpKN1VWJMPZ7rzF1x6jqFQnDnS5SJW7sL-gF0b2gEQR9DooLbUpcjcH9gVl6t5wg_v05CLkdgl_rQwMlppSxuVSR32Q1fa_bpRKpwnvXxsELLgDpYiWkrE7fmgGZ2ndjdQcER282Xg1sdAFhmVkADv2a0yw", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9ae8d78-78b2-4699-91d1-56c6613dad29", "record_id": "flaws_cloudtrail:0000552:d9ae8d78-78b2-4699-91d1-56c6613dad29", "row_index": 552, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9ae8d78-78b2-4699-91d1-56c6613dad29", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de3915af-962d-43d8-b045-3931e4c2d5ce", "record_id": "flaws_cloudtrail:0000553:de3915af-962d-43d8-b045-3931e4c2d5ce", "row_index": 553, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de3915af-962d-43d8-b045-3931e4c2d5ce", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d90ce9e-29f1-4dd9-bb1d-78cd2a0e48e2", "record_id": "flaws_cloudtrail:0000554:7d90ce9e-29f1-4dd9-bb1d-78cd2a0e48e2", "row_index": 554, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1951, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d90ce9e-29f1-4dd9-bb1d-78cd2a0e48e2", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: DWrjfLFAacnw71enpOzerju3s_o4iXCMxJOxjTXWnPpaUpYV1A-dE88GwtfcWYFD3YWAcnjGA0Dsg2wPAsOK5gcqJuUp5G_LCo0SrQuuMoAdgm64E1DOWh-2tcVG1nri-pzxPDiYpXx3uM48kdliypXJzA-vPf0MFjxo1qk8i2W_Sf48qtgB29_2woxWj9L7mBwq7PZQpu8hnTM4oaaQKZn_wbsrPPqBn52_vhjdcNTleC1q0QJL6Wup3dWe449RlcgYlIZG_77DD98tA6MXgBRACRvFx9NAzH0Te00V87kZ5JJX42nv8WEP7NRdfgaXSVG-mMQMtpEhHe8AVZTO2T7QdyLmEbL987odNg8KwfURFBStoR88oCQWKvLJ03eHj42i41s7MqT689sIqOpNVzCpsUEjR4KJYd83FBX7y2OkPHhCn-nmy97wUH8gPy-NxGswqFFqlmx8O8Um_P_G21xABHQj1qWK2yqBzNjMV9iveSFhpoo75KyCovMR_0OcWUo-IIRjdt2dEdAxsw7BVFOuXFgSvRmVFkS3JSF-GsKpc3TxW3ynkIeWfWu2SeJbZL062esK7CyX6rd-mdkLu0tO1SCJ6UHztxkjcgujsHiWuzAgdAJTi2TQ1lAzEBDqU1uCcc5vJ4Eh0ErGj1fNM9hkI-5RigWHzHFiUw", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91baff6f-67cb-400e-ac46-70d9ec690341e", "record_id": "flaws_cloudtrail:0000555:91baff6f-67cb-400e-ac46-70d9ec690341e", "row_index": 555, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1300, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91baff6f-67cb-400e-ac46-70d9ec690341e", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37c40922-ee7c-4d87-9fdb-09ef68595dcc", "record_id": "flaws_cloudtrail:0000556:37c40922-ee7c-4d87-9fdb-09ef68595dcc", "row_index": 556, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1852, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37c40922-ee7c-4d87-9fdb-09ef68595dcc", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: VAA-Uw1zMLMrpLjmpOaofdOSoZtwu7eWPDWzWygT6dgtNUAq2XwCl6eBQDAyWzbnwlu52vp5ecnh9lJJB1miU_NYmZAk3znv9d9KH1Y7JWfU-13I7dLbVPjsPm_R_JeiO3gJDNiXGjJ2cLxdrdQCNGNskrBcC2j_dlITGd-kVzenFAcJif9wz0O1OrzQP4hfOvYic3uvP529N5W-CCYmIEs0nmkJLAEDny-SuEVeXvNNznM8c1iO0v6iy9qsN1IUoNAOO2CrIGOMOktwnY2SkduWBkMbRbZ4abPwWX6Mpxoue_I5q_PI9ZJgOZggFLncJzww1_LA55vAqCXfq5zJngfmhZzBy9sPMs5acx20Y1EbqPIbUGtmWox-W3PV7jHlJOXkHVDWalKcMdradnThhQM6PN5uVCkAz4b9mLGQVrRYQqMTHqj1cXBnRmMg5-AsskgXOxXl2-8mT5n0Mxpb5ppr14pD-H2o5Ne_Oz9cfxFV0tXfCE9LA3Y46Sq-5HK_evQCO67HgA6yZmdnPymwIClxs8fqmIfe7AmfU0bFdVCMEfkkOs0eQx2f1SaZRDRBx82WE8mqcejfyUH5QYfaiZvyu9mji37ZdHhH8k8nQ-oM7gzpBBkolfSky321261W67YcOsTf4m1cqg_tTWJKLNX_jwgtZTk7Jtzh1QQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2944c4c3-fbe2-4c7d-a6b8-d836cdecaaa4", "record_id": "flaws_cloudtrail:0000557:2944c4c3-fbe2-4c7d-a6b8-d836cdecaaa4", "row_index": 557, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2944c4c3-fbe2-4c7d-a6b8-d836cdecaaa4", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a16ff02-37dc-4dfb-97c7-df5a760d3707", "record_id": "flaws_cloudtrail:0000558:4a16ff02-37dc-4dfb-97c7-df5a760d3707", "row_index": 558, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1292, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a16ff02-37dc-4dfb-97c7-df5a760d3707", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05cc3de2-1042-4f4a-8cba-b6b9b6f26897", "record_id": "flaws_cloudtrail:0000559:05cc3de2-1042-4f4a-8cba-b6b9b6f26897", "row_index": 559, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1985, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05cc3de2-1042-4f4a-8cba-b6b9b6f26897", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ewk4TbLnjIMnhNB4HixubMYDF7RLvsuDoB1vubrH0vrp7aRq-joH6L1r8ka-OzZToap-ePuVsgxdMF7JGCkflBbl8KhPZvLC2ZD_d9AbDd3h-9RlI2IkzIjOZGItvim5PYcvFXIv9blX-kXRh3uDdQbu4HBOPod34lN7HgX_Ow-zBskSi01pWcZMMuRrlkxhgQROBlJdYkW_kPkOO_iNYNOek4ugsHht7BXzvGydr1ghUsFEV12DFplwmLCmZR3VVb5U2f8KMQhJsQQGKz-uWoQug4eIltLQHazy-jS431NElDr6L0ShF-BqC7zQUqvAXyRRJBRZo9BH5Xkt19JMi6zZaNKBA3x5H_fcRhCjFkVVCWCyyL4IYFYTBr69kDZ1JZxQVFMH-RmX0pt-gVONfJHn-UiOvnQ9dQvMlXh7te55iz3LTOvUzsGsH5Uj-tAzTZtI2jzeGMalm4-gBIsWwFpAL1hxfZPEcut4dEQ_SiOgezYRr_41sHdP0kVUyA1iaEw7UySLTPzQyfkgr17r6Gav8d7thOt0NZqs0niHU1jzk77I8b1HNiWDqXrD2t3GtI9jZSx8jIx3IeUZX369xYurOqB5iMjo4V25UxzZ4LrE48zUI85vh7kFU8fDSzeRjN5k8VIg3FB3-NPbHJKzxJAn_RaTGi-D", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a1fd040-4277-48c9-a21b-26ad47caab02", "record_id": "flaws_cloudtrail:0000560:4a1fd040-4277-48c9-a21b-26ad47caab02", "row_index": 560, "timestamp": "2019-08-21T13:47:23Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1841, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a1fd040-4277-48c9-a21b-26ad47caab02", "eventTime": "2019-08-21T13:47:23Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: Lzalq2trDzfdoH1jA-d42wrJwN9KrcK-yqw-CAhxxj7Pu7N57g6fTTO92QOw5jgCFfGy0PWf1L3AfdywhxVvnjwITaW1dgsnUAxYvASHa90j-EIj1GTdb0kLh97z4h9hOHhDrbo6dqmid2OeDajTCo1FEW1votnWLEP-6b_G_PClUJrI07kOIjwLKo2dbptU0fXJjyMcBpqUKeI804JgsbeDCIfyDpUlHXEJ8lkykDFMdZ_HE9GOiiSOVD7WSkmpSAs2MykxIJ8obLaeDXgFURmRyyxFJlpNi-X21Mm7qBFCoO0iFSEfBXNMZV7vFZmbsNorRXaqdvB6G9bj7Y_99PXn6nzqvqLNoV-w75esCae1q6YwrQpPMGnllYO2wqMac6n8woT_3zBOB5A8QHKeUbMXc4N8U5_bx7YO_QwZCFx61c0zTadE9sYyp82lgMT9T_JIW1wvaVNhxeFxTxeiTXtVUGpKh_SLtcbsOD30bo01sle1RpzykFgmBTrIh-32TTaUKwJbg_fX2TNbaJbhmRN9qi7KlUaoQJ0WcPp0LSsR5PiXGebUWxZbXrCWAY2Z0VJ_bjwsmzmCxG5u9fiZgWxmJs9qN7SmnQ2vinKX6rZJYiQ-ROCVFnZZdHyy9KUzDRsZfiSx_TaQm6EdiBZll1vpohJII1A", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40d5b31c-bfcb-43ab-abe6-e4b43c8ad966", "record_id": "flaws_cloudtrail:0000561:40d5b31c-bfcb-43ab-abe6-e4b43c8ad966", "row_index": 561, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40d5b31c-bfcb-43ab-abe6-e4b43c8ad966", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d0abdcb-572b-42a6-9046-a56ad098d150", "record_id": "flaws_cloudtrail:0000562:6d0abdcb-572b-42a6-9046-a56ad098d150", "row_index": 562, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d0abdcb-572b-42a6-9046-a56ad098d150", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aa3a631-ae44-4001-bb5a-514b68bab79a", "record_id": "flaws_cloudtrail:0000563:6aa3a631-ae44-4001-bb5a-514b68bab79a", "row_index": 563, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aa3a631-ae44-4001-bb5a-514b68bab79a", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e28bafd3-cb53-4a02-bfd5-efe4c5801d5e", "record_id": "flaws_cloudtrail:0000564:e28bafd3-cb53-4a02-bfd5-efe4c5801d5e", "row_index": 564, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e28bafd3-cb53-4a02-bfd5-efe4c5801d5e", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6628da46-e5d2-4631-bc4d-b13ea498ea83", "record_id": "flaws_cloudtrail:0000565:6628da46-e5d2-4631-bc4d-b13ea498ea83", "row_index": 565, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6628da46-e5d2-4631-bc4d-b13ea498ea83", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a17a5d6-582d-47e6-b069-a0ea16b21e74", "record_id": "flaws_cloudtrail:0000566:0a17a5d6-582d-47e6-b069-a0ea16b21e74", "row_index": 566, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1844, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a17a5d6-582d-47e6-b069-a0ea16b21e74", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ysnhE5ZNkmz0VQtSLJURlLuiJ7dAa8aMI7EiYNfuSavr1clxn14NAIYtxhpMPUbgLMByR02L9VN3fAB7T0qp6_mLt9OPzIbtWgIH-E1nMh5MmEmWahFJpEyH2a5LRa_IVMZFjEpgh-AAYt45PPayfbOPmIYDldfBcafyZbTiXcktGlw4qtBKI15vTZgOyhbTlAI-cNj20WuI3j0RaNSccaakocrexTxauS50cRxt3m9ZLYC212Hrl7HkIguV_g1bayWRCQnzdVCFxmOIjCNNlpCw-vjVAq-fgv2qE7zPgy9jq2FTQpn1Zt_ialr3E47TVvqlLwPCovQ8HoRWRz1-NzTHo5sIRkxgcXfsF-PQ6rR63E3UXOfbUBwauyIZYUlZNa3Dl9RDLjNx1bP3eyJMiCcqhNHmAQgwy8SGmGLPbwesf194cuEWE8TkereYVHizcR7_K74PjKcbhWU2UpVTjIkdPuvtrGU0RAgQIT7C-p-_Kp17_blZEbtZbTvDohrYDAbSeGwH-bAQBovTD_03OjakBTvvSIkxYD5wP5FjZlnWZOmR6OWNrGvNLGgOaF7a7maxWZTeIKq57CegmGkFZUGziHVM6AOrNqdtYr4Mxv-kvpSa_ikhS6HHEzBWj6ImdXfguya0_K7CLpKQZzNAIJaf-LDQRer2uQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab84e0cc-1829-4f2d-a746-1007a59f9b45", "record_id": "flaws_cloudtrail:0000567:ab84e0cc-1829-4f2d-a746-1007a59f9b45", "row_index": 567, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1844, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab84e0cc-1829-4f2d-a746-1007a59f9b45", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: MYiUJaPhNxadjP3InhzJbsf4jmRe0H3wR8H5vPPditmqL4wkRZN_QcxX-eYTosrnkvTPY7h07JLSE4i4bu-I0gy-MSA1aCVeSBbOGOt5CyXRUJ573On7O-5hCzrgWh-1RzXFtlQV04ZB6mPef9QwKf84UOcHsDUMzMNRFBsD84iFaWqxOLuhYltknuVZ9YeZOtHtL3NzOMa_wgN0scKq-3PR1xuJf6TWj6X4NSz6vVULI6SfQ9CSbDTq4l-hy8A1tyPGeV315NuXvSJO5ZBySgDi9y-irgVVcrrTijGa3fRVemOj9fuzSxtWITsZ0-vK0JM39WOeeKbwqg10BsAnZ9x9QGA4svTc3BAFs1XWOX3Ow8MX3JWSIEuFbB2kWF6IwwLSawggfv-Jtz0j1mQ-sdpPFse3gLLjmRLTE1r3s5_QnLjMVnA3tZk9sZWqauiuVzCXNq2ZflJOewUg0IGfnoVeqkWPr53bzkwLzXAliG6-I1VxsdspMzDcgFCFifaN56WkFNydM2DbSOuG-cgFLR0Mhw6DhmkmxF8xkOts4DwxzoTilqhWhixv2JhrIVZP6TWx5jY0uon1uPim40B1Kr1a8gQiOSbG2l9VwaCoHJZCBh93VrArQ_eCPCpjpzJlfwaDLvd9Eted9M3tYxO_EAdNzWuIbmS7Ig", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84ae4417-655f-495a-b140-bb5b7219ff20", "record_id": "flaws_cloudtrail:0000568:84ae4417-655f-495a-b140-bb5b7219ff20", "row_index": 568, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84ae4417-655f-495a-b140-bb5b7219ff20", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LBNUaLbS3cOhPihybSgrE2zYLJ38W9zgmnOEhKZsU1GBHXVQwNxy1O2szkwTlOEfa3vKkVj7r5pVHzBDdI4wi3MON_BsScC2nFwnNFpKnIHo-G7cSJXzItOp1SQEz348y64pdJZ5ZY8u4jkvDLP7BL9SbtGRBCPJAZrN1rtUdtd9-It6T5swuOSj85bYRXdAmJoYO5XOA_EbCOPkDCGbxVDWvereHwZf1z5aYC5alFCPSQdHkUQ6_T9rosb0J6X6rBJAymmh9z0sxcAWzpV_SW9IoNkdk_jT2K2gtQ-5G8qwOQJBCKCzOGakq3VlOXdbrfVZmli0nwHnJNFlGa6LeNVEL5mqqy3nkrJcAnPoMnpI8sBmLx090HpDxyffK3WpZtVsS9f_mb01Yvc2a5VzvpmCyArp9H540IRsqQFwF7Y1NErJ6dsSHLWr7wp0A1gTdM1EODNT2oXTmGZCNIdQdYfL-yQrRKG5TQ_NbNeaq27reaySTFAl8O2-_6t1Z7dw6BdL2cDK-gziV16KctuIZMbwb6R2Z0plvt0KsgEDUE2X49JQSG9SeCNn-mt6rpHf7u0rfypg0lkxKQv10AhwWJWrzhW4hPVpqp6A_3QXC29aH1McxR3tInzERnuVKPN4_lWfOckCnyIyMCnLZ7IhOAjb_l22XQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40d5b31c-bfcb-43ab-abe6-e4b43c8ad966", "record_id": "flaws_cloudtrail:0000569:40d5b31c-bfcb-43ab-abe6-e4b43c8ad966", "row_index": 569, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40d5b31c-bfcb-43ab-abe6-e4b43c8ad966", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d0abdcb-572b-42a6-9046-a56ad098d150", "record_id": "flaws_cloudtrail:0000570:6d0abdcb-572b-42a6-9046-a56ad098d150", "row_index": 570, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d0abdcb-572b-42a6-9046-a56ad098d150", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aa3a631-ae44-4001-bb5a-514b68bab79a", "record_id": "flaws_cloudtrail:0000571:6aa3a631-ae44-4001-bb5a-514b68bab79a", "row_index": 571, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aa3a631-ae44-4001-bb5a-514b68bab79a", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e28bafd3-cb53-4a02-bfd5-efe4c5801d5e", "record_id": "flaws_cloudtrail:0000572:e28bafd3-cb53-4a02-bfd5-efe4c5801d5e", "row_index": 572, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1104, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e28bafd3-cb53-4a02-bfd5-efe4c5801d5e", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6628da46-e5d2-4631-bc4d-b13ea498ea83", "record_id": "flaws_cloudtrail:0000573:6628da46-e5d2-4631-bc4d-b13ea498ea83", "row_index": 573, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1436, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6628da46-e5d2-4631-bc4d-b13ea498ea83", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a17a5d6-582d-47e6-b069-a0ea16b21e74", "record_id": "flaws_cloudtrail:0000574:0a17a5d6-582d-47e6-b069-a0ea16b21e74", "row_index": 574, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1844, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a17a5d6-582d-47e6-b069-a0ea16b21e74", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: ysnhE5ZNkmz0VQtSLJURlLuiJ7dAa8aMI7EiYNfuSavr1clxn14NAIYtxhpMPUbgLMByR02L9VN3fAB7T0qp6_mLt9OPzIbtWgIH-E1nMh5MmEmWahFJpEyH2a5LRa_IVMZFjEpgh-AAYt45PPayfbOPmIYDldfBcafyZbTiXcktGlw4qtBKI15vTZgOyhbTlAI-cNj20WuI3j0RaNSccaakocrexTxauS50cRxt3m9ZLYC212Hrl7HkIguV_g1bayWRCQnzdVCFxmOIjCNNlpCw-vjVAq-fgv2qE7zPgy9jq2FTQpn1Zt_ialr3E47TVvqlLwPCovQ8HoRWRz1-NzTHo5sIRkxgcXfsF-PQ6rR63E3UXOfbUBwauyIZYUlZNa3Dl9RDLjNx1bP3eyJMiCcqhNHmAQgwy8SGmGLPbwesf194cuEWE8TkereYVHizcR7_K74PjKcbhWU2UpVTjIkdPuvtrGU0RAgQIT7C-p-_Kp17_blZEbtZbTvDohrYDAbSeGwH-bAQBovTD_03OjakBTvvSIkxYD5wP5FjZlnWZOmR6OWNrGvNLGgOaF7a7maxWZTeIKq57CegmGkFZUGziHVM6AOrNqdtYr4Mxv-kvpSa_ikhS6HHEzBWj6ImdXfguya0_K7CLpKQZzNAIJaf-LDQRer2uQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab84e0cc-1829-4f2d-a746-1007a59f9b45", "record_id": "flaws_cloudtrail:0000575:ab84e0cc-1829-4f2d-a746-1007a59f9b45", "row_index": 575, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1844, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab84e0cc-1829-4f2d-a746-1007a59f9b45", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: MYiUJaPhNxadjP3InhzJbsf4jmRe0H3wR8H5vPPditmqL4wkRZN_QcxX-eYTosrnkvTPY7h07JLSE4i4bu-I0gy-MSA1aCVeSBbOGOt5CyXRUJ573On7O-5hCzrgWh-1RzXFtlQV04ZB6mPef9QwKf84UOcHsDUMzMNRFBsD84iFaWqxOLuhYltknuVZ9YeZOtHtL3NzOMa_wgN0scKq-3PR1xuJf6TWj6X4NSz6vVULI6SfQ9CSbDTq4l-hy8A1tyPGeV315NuXvSJO5ZBySgDi9y-irgVVcrrTijGa3fRVemOj9fuzSxtWITsZ0-vK0JM39WOeeKbwqg10BsAnZ9x9QGA4svTc3BAFs1XWOX3Ow8MX3JWSIEuFbB2kWF6IwwLSawggfv-Jtz0j1mQ-sdpPFse3gLLjmRLTE1r3s5_QnLjMVnA3tZk9sZWqauiuVzCXNq2ZflJOewUg0IGfnoVeqkWPr53bzkwLzXAliG6-I1VxsdspMzDcgFCFifaN56WkFNydM2DbSOuG-cgFLR0Mhw6DhmkmxF8xkOts4DwxzoTilqhWhixv2JhrIVZP6TWx5jY0uon1uPim40B1Kr1a8gQiOSbG2l9VwaCoHJZCBh93VrArQ_eCPCpjpzJlfwaDLvd9Eted9M3tYxO_EAdNzWuIbmS7Ig", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "84ae4417-655f-495a-b140-bb5b7219ff20", "record_id": "flaws_cloudtrail:0000576:84ae4417-655f-495a-b140-bb5b7219ff20", "row_index": 576, "timestamp": "2019-08-21T13:47:24Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1840, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "84ae4417-655f-495a-b140-bb5b7219ff20", "eventTime": "2019-08-21T13:47:24Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: LBNUaLbS3cOhPihybSgrE2zYLJ38W9zgmnOEhKZsU1GBHXVQwNxy1O2szkwTlOEfa3vKkVj7r5pVHzBDdI4wi3MON_BsScC2nFwnNFpKnIHo-G7cSJXzItOp1SQEz348y64pdJZ5ZY8u4jkvDLP7BL9SbtGRBCPJAZrN1rtUdtd9-It6T5swuOSj85bYRXdAmJoYO5XOA_EbCOPkDCGbxVDWvereHwZf1z5aYC5alFCPSQdHkUQ6_T9rosb0J6X6rBJAymmh9z0sxcAWzpV_SW9IoNkdk_jT2K2gtQ-5G8qwOQJBCKCzOGakq3VlOXdbrfVZmli0nwHnJNFlGa6LeNVEL5mqqy3nkrJcAnPoMnpI8sBmLx090HpDxyffK3WpZtVsS9f_mb01Yvc2a5VzvpmCyArp9H540IRsqQFwF7Y1NErJ6dsSHLWr7wp0A1gTdM1EODNT2oXTmGZCNIdQdYfL-yQrRKG5TQ_NbNeaq27reaySTFAl8O2-_6t1Z7dw6BdL2cDK-gziV16KctuIZMbwb6R2Z0plvt0KsgEDUE2X49JQSG9SeCNn-mt6rpHf7u0rfypg0lkxKQv10AhwWJWrzhW4hPVpqp6A_3QXC29aH1McxR3tInzERnuVKPN4_lWfOckCnyIyMCnLZ7IhOAjb_l22XQ", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc3d0fbb-40de-4787-a15f-b619ea0826d2", "record_id": "flaws_cloudtrail:0000577:bc3d0fbb-40de-4787-a15f-b619ea0826d2", "row_index": 577, "timestamp": "2019-08-21T13:47:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc3d0fbb-40de-4787-a15f-b619ea0826d2", "eventTime": "2019-08-21T13:47:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75636-b72f-422e-b0e9-bd247cb002f5", "record_id": "flaws_cloudtrail:0000578:75636-b72f-422e-b0e9-bd247cb002f5", "row_index": 578, "timestamp": "2019-08-21T13:47:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1328, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75636-b72f-422e-b0e9-bd247cb002f5", "eventTime": "2019-08-21T13:47:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d506ce6-7336-4635-a19a-06fb5c330e15", "record_id": "flaws_cloudtrail:0000579:1d506ce6-7336-4635-a19a-06fb5c330e15", "row_index": 579, "timestamp": "2019-08-21T13:47:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1437, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d506ce6-7336-4635-a19a-06fb5c330e15", "eventTime": "2019-08-21T13:47:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3e35da2-1e16-4774-a808-33fd75112", "record_id": "flaws_cloudtrail:0000580:d3e35da2-1e16-4774-a808-33fd75112", "row_index": 580, "timestamp": "2019-08-21T13:47:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1290, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3e35da2-1e16-4774-a808-33fd75112", "eventTime": "2019-08-21T13:47:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc3d0fbb-40de-4787-a15f-b619ea0826d2", "record_id": "flaws_cloudtrail:0000581:bc3d0fbb-40de-4787-a15f-b619ea0826d2", "row_index": 581, "timestamp": "2019-08-21T13:47:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc3d0fbb-40de-4787-a15f-b619ea0826d2", "eventTime": "2019-08-21T13:47:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75636-b72f-422e-b0e9-bd247cb002f5", "record_id": "flaws_cloudtrail:0000582:75636-b72f-422e-b0e9-bd247cb002f5", "row_index": 582, "timestamp": "2019-08-21T13:47:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1328, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75636-b72f-422e-b0e9-bd247cb002f5", "eventTime": "2019-08-21T13:47:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d506ce6-7336-4635-a19a-06fb5c330e15", "record_id": "flaws_cloudtrail:0000583:1d506ce6-7336-4635-a19a-06fb5c330e15", "row_index": 583, "timestamp": "2019-08-21T13:47:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1437, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d506ce6-7336-4635-a19a-06fb5c330e15", "eventTime": "2019-08-21T13:47:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"sessionIssuer": {}, "webIdFederationData": {}, "attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3e35da2-1e16-4774-a808-33fd75112", "record_id": "flaws_cloudtrail:0000584:d3e35da2-1e16-4774-a808-33fd75112", "row_index": 584, "timestamp": "2019-08-21T13:47:25Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1290, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3e35da2-1e16-4774-a808-33fd75112", "eventTime": "2019-08-21T13:47:25Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5e8cac-25f4-4869-a529-36d36456bd9e", "record_id": "flaws_cloudtrail:0000585:8c5e8cac-25f4-4869-a529-36d36456bd9e", "row_index": 585, "timestamp": "2019-08-21T13:47:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5e8cac-25f4-4869-a529-36d36456bd9e", "eventTime": "2019-08-21T13:47:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1lTdtYopik_gmXREaJc_borYe9jdzXrBwuMx62xr_y96qwdUJjZqHd2wJ1j6mumtnUdsXLGMWieyOlc1duNr49SmcA5WjLs-n9sNPfWdaoTsu9OA792O6I1NoTON3o5yAaXP_xhbHrJp9GAHbgAsa3axOrQk5eJLmulbzuII5XBmLO9unvKniQcxmCg8SNTkTBFIri9OsUX9oBVX5R3g8sQekV1_3VtpmCFt3vczi3GB6wk_iSwF0w2nzvcrJFRIwy8iOyWDX6IH7jl4JF1wtYUOyE8krjf5VEQ4aKb1YQFE7N_NQ2MITNcgfctm7RfXtYD5Xv91fM0MsxB9nHeOFy2QFrg6B0KtGWuOPDbA16fUczRSMXIYzQoa6XnuqZXQh443rdJfkWPZ-3CbtTMV4GsHHazxj58hKz9cFYwx-RzmvphlC_YMDeaM7ih8JK4BYMYNoBV_YlPjMUvJ3SoRMeQbgu_O5DtzhqXAskdY1jfU9gLU59ir613k5TUS4NJwEHS9S2PTxrhmccJdzHuUhQlUfBrJBnznugDoHDuLuTOqPugaL1q8GcV7ryVCM3GFCDXGloxmg8HwqjcdvNUxdEubAnjb12ZcSzZ0WS4IktYL48RCt0O38cGMTtQLFS9q5HgnDKhq7bDB5evxL2w-2I15bBoilme3ZfTH1Zs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa85597-6c26-492f-aacd-d9c10f3d14aa", "record_id": "flaws_cloudtrail:0000586:fa85597-6c26-492f-aacd-d9c10f3d14aa", "row_index": 586, "timestamp": "2019-08-21T13:47:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1396, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa85597-6c26-492f-aacd-d9c10f3d14aa", "eventTime": "2019-08-21T13:47:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8d7cfcc-e36f-4fd2-9081-00ba2b175507", "record_id": "flaws_cloudtrail:0000587:b8d7cfcc-e36f-4fd2-9081-00ba2b175507", "row_index": 587, "timestamp": "2019-08-21T13:47:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1848, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8d7cfcc-e36f-4fd2-9081-00ba2b175507", "eventTime": "2019-08-21T13:47:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: eEx-Cy9zNEwuwktiMZYcgNhs8LqqrKsCurKVV6cnNMmym1zonggUzgMsTbNfqE0GgqqHplYaZVGlXYQ5Ts7hYWObwTmjyN1V7tSSEang7baXQ3MVfttCuEOLg4EdJqedPl1Rq5Hmno0cSol6aXjmAIRm-Xu2UiEyF99wSnZjGl2bPAjfn2VaaU114M8mmsRQx8JeRKigxgVIoqUUVlgBxALDuzqQWXxPcu-coGoT1VxmWe38ysRVmt3-XNnZ0Ia5IRfVq7Hn7F7x5XED1TNHs72HKc7MDA4QIv2FES7M4z6g0QhcmTP7N4bHS0uQokGMqpt9NcG2KB-5Rj2o6YubHYV1jbayx88fLZXJNpB9qwpboK5DPI-PmtZy5Rj-mh1HLNz3z-FdSZMNIYMpxpElcmu-Ef_6dlSUZL3tUBKXf2ugDyXyu4qfmb_P3Uq5D6fapj3_d_XKAu7_ONT56YsPGhLRqRzA3veVh4ck_tIvrPZNgqEy_-Cc7-dSaWVlWUGTo5GEn99pVT_HvcRZxeLCk5pAtvCZLN-RYPaTOtJBE7x9z2Zi8i-sYfrVWl0QSXNvVSG_1mjiM0LbQ24eRXs6SPAZmLSDBZTwVka2PT9JAT97l_0V6j35FEalAu0WexwjF--XT_61fXPDKutzoqNwShY-LxNSRncvX5yh", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff0bae0-f34c-4597-94aa-0ffc9da1d60f", "record_id": "flaws_cloudtrail:0000588:cff0bae0-f34c-4597-94aa-0ffc9da1d60f", "row_index": 588, "timestamp": "2019-08-21T13:47:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff0bae0-f34c-4597-94aa-0ffc9da1d60f", "eventTime": "2019-08-21T13:47:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c5e8cac-25f4-4869-a529-36d36456bd9e", "record_id": "flaws_cloudtrail:0000589:8c5e8cac-25f4-4869-a529-36d36456bd9e", "row_index": 589, "timestamp": "2019-08-21T13:47:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1953, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c5e8cac-25f4-4869-a529-36d36456bd9e", "eventTime": "2019-08-21T13:47:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1lTdtYopik_gmXREaJc_borYe9jdzXrBwuMx62xr_y96qwdUJjZqHd2wJ1j6mumtnUdsXLGMWieyOlc1duNr49SmcA5WjLs-n9sNPfWdaoTsu9OA792O6I1NoTON3o5yAaXP_xhbHrJp9GAHbgAsa3axOrQk5eJLmulbzuII5XBmLO9unvKniQcxmCg8SNTkTBFIri9OsUX9oBVX5R3g8sQekV1_3VtpmCFt3vczi3GB6wk_iSwF0w2nzvcrJFRIwy8iOyWDX6IH7jl4JF1wtYUOyE8krjf5VEQ4aKb1YQFE7N_NQ2MITNcgfctm7RfXtYD5Xv91fM0MsxB9nHeOFy2QFrg6B0KtGWuOPDbA16fUczRSMXIYzQoa6XnuqZXQh443rdJfkWPZ-3CbtTMV4GsHHazxj58hKz9cFYwx-RzmvphlC_YMDeaM7ih8JK4BYMYNoBV_YlPjMUvJ3SoRMeQbgu_O5DtzhqXAskdY1jfU9gLU59ir613k5TUS4NJwEHS9S2PTxrhmccJdzHuUhQlUfBrJBnznugDoHDuLuTOqPugaL1q8GcV7ryVCM3GFCDXGloxmg8HwqjcdvNUxdEubAnjb12ZcSzZ0WS4IktYL48RCt0O38cGMTtQLFS9q5HgnDKhq7bDB5evxL2w-2I15bBoilme3ZfTH1Zs", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa85597-6c26-492f-aacd-d9c10f3d14aa", "record_id": "flaws_cloudtrail:0000590:fa85597-6c26-492f-aacd-d9c10f3d14aa", "row_index": 590, "timestamp": "2019-08-21T13:47:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1396, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa85597-6c26-492f-aacd-d9c10f3d14aa", "eventTime": "2019-08-21T13:47:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "x1e.32xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8d7cfcc-e36f-4fd2-9081-00ba2b175507", "record_id": "flaws_cloudtrail:0000591:b8d7cfcc-e36f-4fd2-9081-00ba2b175507", "row_index": 591, "timestamp": "2019-08-21T13:47:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1848, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8d7cfcc-e36f-4fd2-9081-00ba2b175507", "eventTime": "2019-08-21T13:47:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: eEx-Cy9zNEwuwktiMZYcgNhs8LqqrKsCurKVV6cnNMmym1zonggUzgMsTbNfqE0GgqqHplYaZVGlXYQ5Ts7hYWObwTmjyN1V7tSSEang7baXQ3MVfttCuEOLg4EdJqedPl1Rq5Hmno0cSol6aXjmAIRm-Xu2UiEyF99wSnZjGl2bPAjfn2VaaU114M8mmsRQx8JeRKigxgVIoqUUVlgBxALDuzqQWXxPcu-coGoT1VxmWe38ysRVmt3-XNnZ0Ia5IRfVq7Hn7F7x5XED1TNHs72HKc7MDA4QIv2FES7M4z6g0QhcmTP7N4bHS0uQokGMqpt9NcG2KB-5Rj2o6YubHYV1jbayx88fLZXJNpB9qwpboK5DPI-PmtZy5Rj-mh1HLNz3z-FdSZMNIYMpxpElcmu-Ef_6dlSUZL3tUBKXf2ugDyXyu4qfmb_P3Uq5D6fapj3_d_XKAu7_ONT56YsPGhLRqRzA3veVh4ck_tIvrPZNgqEy_-Cc7-dSaWVlWUGTo5GEn99pVT_HvcRZxeLCk5pAtvCZLN-RYPaTOtJBE7x9z2Zi8i-sYfrVWl0QSXNvVSG_1mjiM0LbQ24eRXs6SPAZmLSDBZTwVka2PT9JAT97l_0V6j35FEalAu0WexwjF--XT_61fXPDKutzoqNwShY-LxNSRncvX5yh", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cff0bae0-f34c-4597-94aa-0ffc9da1d60f", "record_id": "flaws_cloudtrail:0000592:cff0bae0-f34c-4597-94aa-0ffc9da1d60f", "row_index": 592, "timestamp": "2019-08-21T13:47:26Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1293, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cff0bae0-f34c-4597-94aa-0ffc9da1d60f", "eventTime": "2019-08-21T13:47:26Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.InstanceLimitExceeded", "errorMessage": "You have requested more instances (1) than your current instance limit of 0 allows for the specified instance type. Please visit http://aws.amazon.com/contact-us/ec2-request to request an adjustment to this limit.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdf6ab3e-dd52-4f4a-83c3-b6c5b4eb9404", "record_id": "flaws_cloudtrail:0000593:cdf6ab3e-dd52-4f4a-83c3-b6c5b4eb9404", "row_index": 593, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1948, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdf6ab3e-dd52-4f4a-83c3-b6c5b4eb9404", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: EBrqev7ao3zERWDVJZXDyECe7UBPVtmohkcVnGDv5jEqHD5E0tHIi2aEwstFlVmqtKnExGwXmAAlPXD5s14ccK-98ve0rWWISLHbxWTmzBSHgZj7FY7A4DdHbdXNXoN-sMY_X9nivbtUm_4-FWO7BOm3-tzG0Mn4mg8_yxYa6B3Zrf1aITsZ_sfXrKzqKNfU5kx-dJQYWjacJiM5MTeXg92LgtSjse_M_DrqvToMPWmDClkbKLkxxC3nEAlylbKSmP-VxjX4DQmqh25q1FLxFbno1cyDJW_b5LXIkPSs_1CzwxXR6KwrnePrdMfVlupfseOJhLopFs1AB190tUz7qaQao5TxbPFoda3kTd77zFTsuYuOqJa38SJ0YYEB11M3-6FkAr5PwnxACa4AtOvU_9-jZ_vvLa9tniPVGoGerVu6OJN4MHytE-LVecWruhx4OLUFqbOIzJmfbGfHO0MK5lISjQV9J2c8Nmoo5PWOSPDP4S9wAvJH8FYnrEy9MMAg1ctqg9JFVZipOMJRV3hAdxX6U4Pq6zJ-VKww6q9VydyzE0KUJ7mLEvwjWhxl2lQs16pbJCKItTMyui6SfPS3KMl3pIDyqN6U-eeOSHZhD06Yzs5M7wNsIgCW2DlT9MYjP_AgoseB-VDPQo-nDJtLbxROUQOOySNaYMs", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "847ca227-0295-423b-929e-65ec589d6936", "record_id": "flaws_cloudtrail:0000594:847ca227-0295-423b-929e-65ec589d6936", "row_index": 594, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "847ca227-0295-423b-929e-65ec589d6936", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a771d509-7057-4269-81ae-774a150cd896", "record_id": "flaws_cloudtrail:0000595:a771d509-7057-4269-81ae-774a150cd896", "row_index": 595, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1203, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a771d509-7057-4269-81ae-774a150cd896", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36253c42-550b-44f2-9155-60744bb", "record_id": "flaws_cloudtrail:0000596:36253c42-550b-44f2-9155-60744bb", "row_index": 596, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1286, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36253c42-550b-44f2-9155-60744bb", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73f6fa6a-9ce5-41cb-9307-ce213d42fe16", "record_id": "flaws_cloudtrail:0000597:73f6fa6a-9ce5-41cb-9307-ce213d42fe16", "row_index": 597, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73f6fa6a-9ce5-41cb-9307-ce213d42fe16", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9243cb8-ca88-478d-9087-c2d9b3605d00", "record_id": "flaws_cloudtrail:0000598:f9243cb8-ca88-478d-9087-c2d9b3605d00", "row_index": 598, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9243cb8-ca88-478d-9087-c2d9b3605d00", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "051570cb-707b-4f8a-8109-af5cd39ccbae", "record_id": "flaws_cloudtrail:0000599:051570cb-707b-4f8a-8109-af5cd39ccbae", "row_index": 599, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1852, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "051570cb-707b-4f8a-8109-af5cd39ccbae", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1aCZxvYQs6WagCCC-ktYR0xV_1zXcYsQzzeAckvT2TM9RO03Kglj9I6D7GAOZ7wIKVGwWCIuOCF-Ip--IHnfOD5X0Zg-jpVT4JiEzd_y03RJY-W8-TpZkW2CNlQ39HPNnzxjnvW1ePvYdjA6bnbjB9SFqdphrsPhEObq07vti6UohDOvyIq4wS8TUOJmYuFrxgQ9-QLuVEW_UJ78evPAZhRcT6ZeV27Q8qh1b0gCRRmA265NsK_PJMnXGf98wpa2OzxBjcL8B91uS5UbkN4qWpdXfN5IU4x8W4fqxEX0E6NTAXZ_T5AfYZ0zOURsMQHIbQ3rc-zhho-b8rUOcCmjYIaK7pk3rAWMgJB_Sk529LuQ3sseAbG6TlO_qwujoE_XVDxmSMayXFwV6QLvf5v8pUFWfDy4eg0Bbx-v6IyQFllVATNIBrn4nXMfUT3a08yjD4tlRniIvLmQirMGcwfcZ7CLiewjUJfJLyRz-JlptOrMFzOouugpzQPWWb-IUI1ToJ2TNIUuCnWfWWWH5OZLQdEgclnMzREw72-pSgXdlH7MabOmEzJhEmeItlhw6C60J-ckLFMANWSrVF4iUi2ndQURp6KF8shRBdVjMEB18bzN0fcqemIVgcDhbWCbZ1RB7jsIJ1fs-wAq-AuIOWoLaRxzhB_HVkQVx8xP", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08c18f57-8151-4907-871c-a2073f6bfb63", "record_id": "flaws_cloudtrail:0000600:08c18f57-8151-4907-871c-a2073f6bfb63", "row_index": 600, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1188, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08c18f57-8151-4907-871c-a2073f6bfb63", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f443878-95ed-4af4-8dbb-d2ab0aa2d64d", "record_id": "flaws_cloudtrail:0000601:f443878-95ed-4af4-8dbb-d2ab0aa2d64d", "row_index": 601, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1839, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f443878-95ed-4af4-8dbb-d2ab0aa2d64d", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "us-east-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: G7lyMbYHQ59A_GdM6rCOjR92lA7qnRVo5iVQFzHnmz86qgOQ1rxsgzdY2ZmIKTXKrA7-nYUoOOg8kaHnhmx9ayuYXaEY3nFqlDPrgeBU_z2XWjXaK2_MCKFI2pE1d2-IfaxDLtF6PlOJvBr9CpifkaYZXUyhDyddT5zjbeUxvjtLZFhuXaA-i-Iy8FVEZmRrVvnX5LOZ1aJQaVCvWNPHxjSvaxfRe5qD4Tkzrd50kRP-aH8I56nbvfc8Bcs-MOq2vs5aTeaoGLg-bT1f0NujVBoEGyhJKPtyEWdyHHb8M9YCdlRWpPhRgUUE2R0LLumfEvMDbjYFwb6ZHA_-5FfzKgLoG5Odmb_FW7YUT-cB5-uymPAsZosJ9WkVUQ_5Chnk77GEM7fqMPI9Xwu2dRfZTDLgHoZWBeaniE2Cs_aak6Q_MkeL-M5TIyu3eQJoBnkBSGUCs54roCav0G--yciR12ODAdlXn0zm9o-2L4NGsPOHaNUH9Hhu4WstTfFkapPJwX8HS5D1vpS4Dff8Fv6CsvQm9y_P05KbCUNhxiM9KyjbR7NiZ3P3D4IEfvaicUXvqGbnFxBMfFyIdGKlaSvOtn_YgM95hZK0dXvKyzsSM-2u20HvQ8ohzkIOer_w54nkoIpoGJOxn-Ue3FRNIDz-UTuUQoqXOA", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-531ae49a8dc02eaf9", "minCount": 1, "maxCount": 10}]}, "instanceType": "m5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdf6ab3e-dd52-4f4a-83c3-b6c5b4eb9404", "record_id": "flaws_cloudtrail:0000602:cdf6ab3e-dd52-4f4a-83c3-b6c5b4eb9404", "row_index": 602, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1948, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdf6ab3e-dd52-4f4a-83c3-b6c5b4eb9404", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: EBrqev7ao3zERWDVJZXDyECe7UBPVtmohkcVnGDv5jEqHD5E0tHIi2aEwstFlVmqtKnExGwXmAAlPXD5s14ccK-98ve0rWWISLHbxWTmzBSHgZj7FY7A4DdHbdXNXoN-sMY_X9nivbtUm_4-FWO7BOm3-tzG0Mn4mg8_yxYa6B3Zrf1aITsZ_sfXrKzqKNfU5kx-dJQYWjacJiM5MTeXg92LgtSjse_M_DrqvToMPWmDClkbKLkxxC3nEAlylbKSmP-VxjX4DQmqh25q1FLxFbno1cyDJW_b5LXIkPSs_1CzwxXR6KwrnePrdMfVlupfseOJhLopFs1AB190tUz7qaQao5TxbPFoda3kTd77zFTsuYuOqJa38SJ0YYEB11M3-6FkAr5PwnxACa4AtOvU_9-jZ_vvLa9tniPVGoGerVu6OJN4MHytE-LVecWruhx4OLUFqbOIzJmfbGfHO0MK5lISjQV9J2c8Nmoo5PWOSPDP4S9wAvJH8FYnrEy9MMAg1ctqg9JFVZipOMJRV3hAdxX6U4Pq6zJ-VKww6q9VydyzE0KUJ7mLEvwjWhxl2lQs16pbJCKItTMyui6SfPS3KMl3pIDyqN6U-eeOSHZhD06Yzs5M7wNsIgCW2DlT9MYjP_AgoseB-VDPQo-nDJtLbxROUQOOySNaYMs", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "847ca227-0295-423b-929e-65ec589d6936", "record_id": "flaws_cloudtrail:0000603:847ca227-0295-423b-929e-65ec589d6936", "row_index": 603, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAZ6XVDR2PA984G89L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1207, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "847ca227-0295-423b-929e-65ec589d6936", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAZ6XVDR2PA984G89L", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:19Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a771d509-7057-4269-81ae-774a150cd896", "record_id": "flaws_cloudtrail:0000604:a771d509-7057-4269-81ae-774a150cd896", "row_index": 604, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1203, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a771d509-7057-4269-81ae-774a150cd896", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "i3.metal", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36253c42-550b-44f2-9155-60744bb", "record_id": "flaws_cloudtrail:0000605:36253c42-550b-44f2-9155-60744bb", "row_index": 605, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIARF55FBMFZBXLKDFW", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1286, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36253c42-550b-44f2-9155-60744bb", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIARF55FBMFZBXLKDFW", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-08-21T07:41:25Z"}}}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73f6fa6a-9ce5-41cb-9307-ce213d42fe16", "record_id": "flaws_cloudtrail:0000606:73f6fa6a-9ce5-41cb-9307-ce213d42fe16", "row_index": 606, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73f6fa6a-9ce5-41cb-9307-ce213d42fe16", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9243cb8-ca88-478d-9087-c2d9b3605d00", "record_id": "flaws_cloudtrail:0000607:f9243cb8-ca88-478d-9087-c2d9b3605d00", "row_index": 607, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1107, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9243cb8-ca88-478d-9087-c2d9b3605d00", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.RequestLimitExceeded", "errorMessage": "Request limit exceeded.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "z1d.12xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "051570cb-707b-4f8a-8109-af5cd39ccbae", "record_id": "flaws_cloudtrail:0000608:051570cb-707b-4f8a-8109-af5cd39ccbae", "row_index": 608, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 1852, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "051570cb-707b-4f8a-8109-af5cd39ccbae", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "ap-northeast-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation. Encoded authorization failure message: 1aCZxvYQs6WagCCC-ktYR0xV_1zXcYsQzzeAckvT2TM9RO03Kglj9I6D7GAOZ7wIKVGwWCIuOCF-Ip--IHnfOD5X0Zg-jpVT4JiEzd_y03RJY-W8-TpZkW2CNlQ39HPNnzxjnvW1ePvYdjA6bnbjB9SFqdphrsPhEObq07vti6UohDOvyIq4wS8TUOJmYuFrxgQ9-QLuVEW_UJ78evPAZhRcT6ZeV27Q8qh1b0gCRRmA265NsK_PJMnXGf98wpa2OzxBjcL8B91uS5UbkN4qWpdXfN5IU4x8W4fqxEX0E6NTAXZ_T5AfYZ0zOURsMQHIbQ3rc-zhho-b8rUOcCmjYIaK7pk3rAWMgJB_Sk529LuQ3sseAbG6TlO_qwujoE_XVDxmSMayXFwV6QLvf5v8pUFWfDy4eg0Bbx-v6IyQFllVATNIBrn4nXMfUT3a08yjD4tlRniIvLmQirMGcwfcZ7CLiewjUJfJLyRz-JlptOrMFzOouugpzQPWWb-IUI1ToJ2TNIUuCnWfWWWH5OZLQdEgclnMzREw72-pSgXdlH7MabOmEzJhEmeItlhw6C60J-ckLFMANWSrVF4iUi2ndQURp6KF8shRBdVjMEB18bzN0fcqemIVgcDhbWCbZ1RB7jsIJ1fs-wAq-AuIOWoLaRxzhB_HVkQVx8xP", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-c6ae2e7d00cb43daf", "minCount": 1, "maxCount": 10}]}, "instanceType": "c5d.18xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08c18f57-8151-4907-871c-a2073f6bfb63", "record_id": "flaws_cloudtrail:0000609:08c18f57-8151-4907-871c-a2073f6bfb63", "row_index": 609, "timestamp": "2019-08-21T13:47:27Z", "event_type": "RunInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.205.62.253", "user_agent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1188, "raw_record_depth": 7, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08c18f57-8151-4907-871c-a2073f6bfb63", "eventTime": "2019-08-21T13:47:27Z", "eventName": "RunInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.205.62.253", "userAgent": "Boto3/1.9.201 Python/2.7.12 Linux/4.4.0-157-generic Botocore/1.12.201", "awsRegion": "sa-east-1", "errorCode": "Client.Unsupported", "errorMessage": "The requested configuration is currently not supported. Please check the documentation for supported configurations.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {"items": [{"imageId": "ami-5209e150a9ee64097", "minCount": 1, "maxCount": 10}]}, "instanceType": "r5d.24xlarge", "monitoring": {"enabled": false}, "disableApiTermination": true, "tagSpecificationSet": {"items": [{"resourceType": "instance", "tags": [{"__truncated_type": "dict"}]}]}}, "resources": []}}