Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27e1be76-2bfc-4892-9659-2cfc4e471d82", "record_id": "flaws_cloudtrail:0000000:27e1be76-2bfc-4892-9659-2cfc4e471d82", "row_index": 0, "timestamp": "2019-07-12T09:55:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27e1be76-2bfc-4892-9659-2cfc4e471d82", "eventTime": "2019-07-12T09:55:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrNGlWbldjRjdyM29GREkvUkR6ZVpZRVcxbUNjL0RSUG9MS2RHOVNtUXZlZngvZEtqcUJtK01zK2FYUzExVGJFRWVERU1XTDVuK0lpTmFrTysyVW9PU2U4Qk43QTN6TEUyQnZ1aTMvMFBPdVhtZlQ4aFFaN2xqbThFVEcrNUczOEN0SEZjbWw4U04zbi8wY2pYSXRTUm9JenNWT1k3YVNLSTBIQTNuWEdlMFRXdkxLUGYyNS9NTU1JRjhETWlxNFJXRlA0MTRhT09ZYXpVQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55cdac95-a7b5-4830-b09e-5a3fbb19a665", "record_id": "flaws_cloudtrail:0000001:55cdac95-a7b5-4830-b09e-5a3fbb19a665", "row_index": 1, "timestamp": "2019-07-12T09:55:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55cdac95-a7b5-4830-b09e-5a3fbb19a665", "eventTime": "2019-07-12T09:55:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5SlRsTURTcENEem1rb3A5THJ1YzFzRDN3d25rSUVZR1FpQzI2azNheENtRjlpK1BCa2FpUjdCUmJwakFZMnl6M0xVK1FIQm5PeHdoSlpHTlVjRDhVdWZaNjRCcXVoQWxPVFBHNUdVM2lvcFRXbVg2OHBHMzJuM05GZ2tTNm4zUGlsdGxSL1h6N0RibHQzWDJvNG9jaG1KWXdxTDlhZmtlUHVsZW9haE40VFQ5dm9udnMrWWdQQzNrM2dnSzc0eENlQzd5eUZGclduOWxxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd9323a7-54fa-4af2-a83f-6c6e392a5a54", "record_id": "flaws_cloudtrail:0000002:dd9323a7-54fa-4af2-a83f-6c6e392a5a54", "row_index": 2, "timestamp": "2019-07-12T09:55:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd9323a7-54fa-4af2-a83f-6c6e392a5a54", "eventTime": "2019-07-12T09:55:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzekZ5QzZTbHEwU0lPOVgwYU4ya2ZuSlJsWjJycGpQNmtqVmx4OTViODZiQkw5bzFlZmtTMEFFZWpTOVlIRG42bmt4dGN4NUw1YjV6aDAvVXRuWUtBZzVxNDVRaUUwZXFmYi83dWxFTzdQV0JRY3V0VndzQnEzRWgyU0luRVFwOFJjakUxNFFUdzFiZEY2WDY4eHorcTNoRUN4OXUvTFVnVnNOckdIcWE5NDdWOHNRVjhBM1VqV2diV2tTRkxVdXhrd0wvdmZrVGg4d0VYdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55cdac95-a7b5-4830-b09e-5a3fbb19a665", "record_id": "flaws_cloudtrail:0000003:55cdac95-a7b5-4830-b09e-5a3fbb19a665", "row_index": 3, "timestamp": "2019-07-12T09:55:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55cdac95-a7b5-4830-b09e-5a3fbb19a665", "eventTime": "2019-07-12T09:55:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5SlRsTURTcENEem1rb3A5THJ1YzFzRDN3d25rSUVZR1FpQzI2azNheENtRjlpK1BCa2FpUjdCUmJwakFZMnl6M0xVK1FIQm5PeHdoSlpHTlVjRDhVdWZaNjRCcXVoQWxPVFBHNUdVM2lvcFRXbVg2OHBHMzJuM05GZ2tTNm4zUGlsdGxSL1h6N0RibHQzWDJvNG9jaG1KWXdxTDlhZmtlUHVsZW9haE40VFQ5dm9udnMrWWdQQzNrM2dnSzc0eENlQzd5eUZGclduOWxxdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd9323a7-54fa-4af2-a83f-6c6e392a5a54", "record_id": "flaws_cloudtrail:0000004:dd9323a7-54fa-4af2-a83f-6c6e392a5a54", "row_index": 4, "timestamp": "2019-07-12T09:55:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1088, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd9323a7-54fa-4af2-a83f-6c6e392a5a54", "eventTime": "2019-07-12T09:55:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzekZ5QzZTbHEwU0lPOVgwYU4ya2ZuSlJsWjJycGpQNmtqVmx4OTViODZiQkw5bzFlZmtTMEFFZWpTOVlIRG42bmt4dGN4NUw1YjV6aDAvVXRuWUtBZzVxNDVRaUUwZXFmYi83dWxFTzdQV0JRY3V0VndzQnEzRWgyU0luRVFwOFJjakUxNFFUdzFiZEY2WDY4eHorcTNoRUN4OXUvTFVnVnNOckdIcWE5NDdWOHNRVjhBM1VqV2diV2tTRkxVdXhrd0wvdmZrVGg4d0VYdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "044b6c42-3d7c-42f3-b46c-ebfb13888618", "record_id": "flaws_cloudtrail:0000005:044b6c42-3d7c-42f3-b46c-ebfb13888618", "row_index": 5, "timestamp": "2019-07-12T09:55:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "044b6c42-3d7c-42f3-b46c-ebfb13888618", "eventTime": "2019-07-12T09:55:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpQ3Zsck1ZVkV0SDVVeExlT091cVVZbFFpZ0ZDNGNEWjBGL2dKOU0yaXBLUFF4M1lKeEordEEzSVQwSUw3cXNQOGRuZ202T1FMZUF3dGxqU04wRmRMUnhwblRyTjJVNDRTbGRtN0dkZVFicEVZeVNrOUpUODFUbGhtRlFLejluWDdKc3ZyL3IrRVVoRUlRV05kT0tEVmx1dTQ3Vzh6cWlsZFQwK2hkcDFWSmxvQTNIOVIvbnpZSFd1R09mV2k4ek50ZlNaNlhHUjVBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "044b6c42-3d7c-42f3-b46c-ebfb13888618", "record_id": "flaws_cloudtrail:0000006:044b6c42-3d7c-42f3-b46c-ebfb13888618", "row_index": 6, "timestamp": "2019-07-12T09:55:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1076, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "044b6c42-3d7c-42f3-b46c-ebfb13888618", "eventTime": "2019-07-12T09:55:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJpQ3Zsck1ZVkV0SDVVeExlT091cVVZbFFpZ0ZDNGNEWjBGL2dKOU0yaXBLUFF4M1lKeEordEEzSVQwSUw3cXNQOGRuZ202T1FMZUF3dGxqU04wRmRMUnhwblRyTjJVNDRTbGRtN0dkZVFicEVZeVNrOUpUODFUbGhtRlFLejluWDdKc3ZyL3IrRVVoRUlRV05kT0tEVmx1dTQ3Vzh6cWlsZFQwK2hkcDFWSmxvQTNIOVIvbnpZSFd1R09mV2k4ek50ZlNaNlhHUjVBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb8400fb-6039-4ae0-b43c-b70bfd8a4564", "record_id": "flaws_cloudtrail:0000007:fb8400fb-6039-4ae0-b43c-b70bfd8a4564", "row_index": 7, "timestamp": "2019-07-12T09:55:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb8400fb-6039-4ae0-b43c-b70bfd8a4564", "eventTime": "2019-07-12T09:55:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrL2ZmUGZnUGNFY0pEM01IZWsrVy9wK1pIZ2hEM3M4UGh0bEN6dy9aRDBtaVlDSTV3TkhNRUNNa3orZUs3N3BQVGxXVFgwbzVYUHVBejRmYzBOUncvOU5aT3dybXBCREFXNDh5dWFUVHMyVlBsWE80K0xDMEs2SWJISEsyOUpjY3NQOG1zZU5jd2RpSTVWYW1Eb2dGR0JtSzZRYlFpa1pPb1NvNmxqVC9FYU1iMzRzUUxOekY3M1ZPV3VoVlNWaXdxT0g0TW55ZXgxaXRYZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f816e309-e35a-4cf0-a78e-2e6e5730e811", "record_id": "flaws_cloudtrail:0000008:f816e309-e35a-4cf0-a78e-2e6e5730e811", "row_index": 8, "timestamp": "2019-07-12T09:55:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f816e309-e35a-4cf0-a78e-2e6e5730e811", "eventTime": "2019-07-12T09:55:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFd2lOM00rNmpKaC9WY1FTV3pUTjRmWGpMeU9NUXJzZTcyQm9WR254TUFFWDNVZStUSFdVbk9nNTJjdUt4RlcvbVNKT2Q2TFpKSm9yZ2ZZRnhBemlRQ0Y3Q3dnRSttNEZLa0F4K2RWQlVmUEMyNTI3RnBHOVpCZCtMZEZuNDB2T1dwdzdBYjV6dmphdmtOTW5zdVZrdUhTZThJblpTbnA3SFBSU2xyRTduS1l3dzFWbVExZmVMcXBkL2E3R0svUllkeW05YmlVTFJPajU0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb8400fb-6039-4ae0-b43c-b70bfd8a4564", "record_id": "flaws_cloudtrail:0000009:fb8400fb-6039-4ae0-b43c-b70bfd8a4564", "row_index": 9, "timestamp": "2019-07-12T09:55:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb8400fb-6039-4ae0-b43c-b70bfd8a4564", "eventTime": "2019-07-12T09:55:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrL2ZmUGZnUGNFY0pEM01IZWsrVy9wK1pIZ2hEM3M4UGh0bEN6dy9aRDBtaVlDSTV3TkhNRUNNa3orZUs3N3BQVGxXVFgwbzVYUHVBejRmYzBOUncvOU5aT3dybXBCREFXNDh5dWFUVHMyVlBsWE80K0xDMEs2SWJISEsyOUpjY3NQOG1zZU5jd2RpSTVWYW1Eb2dGR0JtSzZRYlFpa1pPb1NvNmxqVC9FYU1iMzRzUUxOekY3M1ZPV3VoVlNWaXdxT0g0TW55ZXgxaXRYZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f816e309-e35a-4cf0-a78e-2e6e5730e811", "record_id": "flaws_cloudtrail:0000010:f816e309-e35a-4cf0-a78e-2e6e5730e811", "row_index": 10, "timestamp": "2019-07-12T09:55:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f816e309-e35a-4cf0-a78e-2e6e5730e811", "eventTime": "2019-07-12T09:55:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFd2lOM00rNmpKaC9WY1FTV3pUTjRmWGpMeU9NUXJzZTcyQm9WR254TUFFWDNVZStUSFdVbk9nNTJjdUt4RlcvbVNKT2Q2TFpKSm9yZ2ZZRnhBemlRQ0Y3Q3dnRSttNEZLa0F4K2RWQlVmUEMyNTI3RnBHOVpCZCtMZEZuNDB2T1dwdzdBYjV6dmphdmtOTW5zdVZrdUhTZThJblpTbnA3SFBSU2xyRTduS1l3dzFWbVExZmVMcXBkL2E3R0svUllkeW05YmlVTFJPajU0QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23abd1e4-4f62-4667-b0aa-4dd989632ed5", "record_id": "flaws_cloudtrail:0000011:23abd1e4-4f62-4667-b0aa-4dd989632ed5", "row_index": 11, "timestamp": "2019-07-12T09:55:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23abd1e4-4f62-4667-b0aa-4dd989632ed5", "eventTime": "2019-07-12T09:55:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaYWRjQ2JNWk1rTlUvMjF1aHNvZGc3UjFwdjlXSkd2bmZ4NU94RlQxS1lMb1RrYWtkNkk3Y29Odll2OGF2QS9jNWNDQ0kzdTVxeEtVUnJrK05JS0pKUmZJM3JpL1lxdVNTWitZMnVTZ2kvWXRSeDcySDBOM1VPaHFNYmVIaGJBUE0zalViMTNOa1Y0eE5GSWlYR2JjdkJoVjFvV0k1alFpaENZNGFUaHhuYXErZnZoeUVIQVR2Y3JOTmdXbnF2RUVPZnd1RGtvdGNQdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23abd1e4-4f62-4667-b0aa-4dd989632ed5", "record_id": "flaws_cloudtrail:0000012:23abd1e4-4f62-4667-b0aa-4dd989632ed5", "row_index": 12, "timestamp": "2019-07-12T09:55:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23abd1e4-4f62-4667-b0aa-4dd989632ed5", "eventTime": "2019-07-12T09:55:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJaYWRjQ2JNWk1rTlUvMjF1aHNvZGc3UjFwdjlXSkd2bmZ4NU94RlQxS1lMb1RrYWtkNkk3Y29Odll2OGF2QS9jNWNDQ0kzdTVxeEtVUnJrK05JS0pKUmZJM3JpL1lxdVNTWitZMnVTZ2kvWXRSeDcySDBOM1VPaHFNYmVIaGJBUE0zalViMTNOa1Y0eE5GSWlYR2JjdkJoVjFvV0k1alFpaENZNGFUaHhuYXErZnZoeUVIQVR2Y3JOTmdXbnF2RUVPZnd1RGtvdGNQdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42edde09-fe65-45bd-ba87-c3f373c08c12", "record_id": "flaws_cloudtrail:0000013:42edde09-fe65-45bd-ba87-c3f373c08c12", "row_index": 13, "timestamp": "2019-07-12T09:55:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42edde09-fe65-45bd-ba87-c3f373c08c12", "eventTime": "2019-07-12T09:55:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2cEI4TkxSa0VzdlNLUWpRd0U3WldJczlRa3pQaGg2UmtDK25VeGpsUlM0VFA3Vm4rQ1RoemNNa3pCZXRUMnhkNXA3S09WTURoQTlvN1M4bytHMWd3cXNWWFZmOWx2dWk3OWp3RnRWV2pLRzZCRzlkZHBweUxxRXAzTFdSaEJ1WWg2OWZjcTE3VUI3dklFWjdtZHpXSVc5TlVtSWQ5N05qd2ZKOFNQSlRMZmtQU0ZlYkdVWFdmaXZKOFUxYmxuc0pVMWxabzNxSkVJdnN0dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42edde09-fe65-45bd-ba87-c3f373c08c12", "record_id": "flaws_cloudtrail:0000014:42edde09-fe65-45bd-ba87-c3f373c08c12", "row_index": 14, "timestamp": "2019-07-12T09:55:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42edde09-fe65-45bd-ba87-c3f373c08c12", "eventTime": "2019-07-12T09:55:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2cEI4TkxSa0VzdlNLUWpRd0U3WldJczlRa3pQaGg2UmtDK25VeGpsUlM0VFA3Vm4rQ1RoemNNa3pCZXRUMnhkNXA3S09WTURoQTlvN1M4bytHMWd3cXNWWFZmOWx2dWk3OWp3RnRWV2pLRzZCRzlkZHBweUxxRXAzTFdSaEJ1WWg2OWZjcTE3VUI3dklFWjdtZHpXSVc5TlVtSWQ5N05qd2ZKOFNQSlRMZmtQU0ZlYkdVWFdmaXZKOFUxYmxuc0pVMWxabzNxSkVJdnN0dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b416628c3-7c88-42b0-ac35-83ae4e594823", "record_id": "flaws_cloudtrail:0000015:b416628c3-7c88-42b0-ac35-83ae4e594823", "row_index": 15, "timestamp": "2019-07-12T09:55:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b416628c3-7c88-42b0-ac35-83ae4e594823", "eventTime": "2019-07-12T09:55:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4UndLNEM3ekFXcUxzN0ExNkVLclUwTlFMWGhUZ3dxSTc3YTUzMzAyZXdDVk5xTTkrV1JXdE4xdjA4aWpvQ0JsVjFmUGZockpGZDNNWnZQQmtmUnhYWnV2UUhReFZ6Snc2MiszczZZa2RmcURKWURBUmMvbmhwQU0rcnY1bFlWSm85OTEvOVZWZGNIaTg0N3NWdkFaNEQ4bmlneXduTWNybFNlYzA5STFGWUJ0S0pCRUZWZEdSZ2xjSlVySG5CQ0NXOEEwKzN0MGp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17714a0a-ff57-45ec-98ab-d4fa69154fd3", "record_id": "flaws_cloudtrail:0000016:17714a0a-ff57-45ec-98ab-d4fa69154fd3", "row_index": 16, "timestamp": "2019-07-12T09:55:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17714a0a-ff57-45ec-98ab-d4fa69154fd3", "eventTime": "2019-07-12T09:55:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyYTZDZldQSGFESXZRb3R0YVhuWmkxSG51WktMWUtkNTRJM3lUOTNpaWtLd2dtR2cxNDkxQjZwQ1VVUW1yVnluMlYzNStFSHhjZWl1UklVL0tFL0k2UHAvbzNFR0ZUTUMzTVE5OUk0L0NOSCtGVko3VTlWbG1tOGR3WGhVdVBtY3cweFRpNWFiNVBXTVlJOEtvOW9Dbk9kL0d0SlZCRjQvKzJ6YUw2ZTRody9nUW82Q2JDaFdlSXg0azloRDJMZmdKQWVWNUIvQlZQOWRVUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b416628c3-7c88-42b0-ac35-83ae4e594823", "record_id": "flaws_cloudtrail:0000017:b416628c3-7c88-42b0-ac35-83ae4e594823", "row_index": 17, "timestamp": "2019-07-12T09:55:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1084, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b416628c3-7c88-42b0-ac35-83ae4e594823", "eventTime": "2019-07-12T09:55:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4UndLNEM3ekFXcUxzN0ExNkVLclUwTlFMWGhUZ3dxSTc3YTUzMzAyZXdDVk5xTTkrV1JXdE4xdjA4aWpvQ0JsVjFmUGZockpGZDNNWnZQQmtmUnhYWnV2UUhReFZ6Snc2MiszczZZa2RmcURKWURBUmMvbmhwQU0rcnY1bFlWSm85OTEvOVZWZGNIaTg0N3NWdkFaNEQ4bmlneXduTWNybFNlYzA5STFGWUJ0S0pCRUZWZEdSZ2xjSlVySG5CQ0NXOEEwKzN0MGp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17714a0a-ff57-45ec-98ab-d4fa69154fd3", "record_id": "flaws_cloudtrail:0000018:17714a0a-ff57-45ec-98ab-d4fa69154fd3", "row_index": 18, "timestamp": "2019-07-12T09:55:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17714a0a-ff57-45ec-98ab-d4fa69154fd3", "eventTime": "2019-07-12T09:55:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJyYTZDZldQSGFESXZRb3R0YVhuWmkxSG51WktMWUtkNTRJM3lUOTNpaWtLd2dtR2cxNDkxQjZwQ1VVUW1yVnluMlYzNStFSHhjZWl1UklVL0tFL0k2UHAvbzNFR0ZUTUMzTVE5OUk0L0NOSCtGVko3VTlWbG1tOGR3WGhVdVBtY3cweFRpNWFiNVBXTVlJOEtvOW9Dbk9kL0d0SlZCRjQvKzJ6YUw2ZTRody9nUW82Q2JDaFdlSXg0azloRDJMZmdKQWVWNUIvQlZQOWRVUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c006de61-92b3-4f08-b4bb-0fdaca2ede90", "record_id": "flaws_cloudtrail:0000019:c006de61-92b3-4f08-b4bb-0fdaca2ede90", "row_index": 19, "timestamp": "2019-07-12T09:55:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c006de61-92b3-4f08-b4bb-0fdaca2ede90", "eventTime": "2019-07-12T09:55:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqelh3N1Izbjcyc3ArSTVtNlRuMXJwblB0TjVzOW0vWTBwYXpkcFNuejdIbkZtS0tZS1RpWDhDMVhpdzF4SG9JdzNWUzdaMGtDbzBBVmpMYlR4L21UdjZkZXFYZVUxbEpYQzFjSDhEckU1cjkybGNRNnFidjR2bmlKRFQ1azFIanR4WDk2eE1BZnFHRGNiMHpBNjdDcldLZmNkQkJpK1Z5dGxHY0MxSGMzK0xwSUh6YVlqd09JL2pyY1pXeHU2V1pTdGRrb3paZUV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c006de61-92b3-4f08-b4bb-0fdaca2ede90", "record_id": "flaws_cloudtrail:0000020:c006de61-92b3-4f08-b4bb-0fdaca2ede90", "row_index": 20, "timestamp": "2019-07-12T09:55:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1082, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c006de61-92b3-4f08-b4bb-0fdaca2ede90", "eventTime": "2019-07-12T09:55:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqelh3N1Izbjcyc3ArSTVtNlRuMXJwblB0TjVzOW0vWTBwYXpkcFNuejdIbkZtS0tZS1RpWDhDMVhpdzF4SG9JdzNWUzdaMGtDbzBBVmpMYlR4L21UdjZkZXFYZVUxbEpYQzFjSDhEckU1cjkybGNRNnFidjR2bmlKRFQ1azFIanR4WDk2eE1BZnFHRGNiMHpBNjdDcldLZmNkQkJpK1Z5dGxHY0MxSGMzK0xwSUh6YVlqd09JL2pyY1pXeHU2V1pTdGRrb3paZUV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04b34329-1771-45bd-b61a-875fdf3f0d5c", "record_id": "flaws_cloudtrail:0000021:04b34329-1771-45bd-b61a-875fdf3f0d5c", "row_index": 21, "timestamp": "2019-07-12T09:55:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04b34329-1771-45bd-b61a-875fdf3f0d5c", "eventTime": "2019-07-12T09:55:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5TVo4YmlJL0d3WmdoRFhjejM1U1h6WkNRVkZJaGVhOHZlUG1Mb1pyKzA3SUxkNmR5dmxLdDBiWFRLUGEwSUMxV01TN1NkTXQ2WmNqVTVoRzkzNFJRUnJzc2pyY001UWJpU1I4Z2hhN09rK2lZMmVnMHRsUlFkY2lNcGpPcDhxcnlEMUlOa0I4ZmNsNXdadS8xbDNuNGdrNU9HRVdFbXRzdjNBRS91cEFjU3RFRHV6WGFoNlg2ZUIvaW1oYUNFeTZvK1Uya2xxblpnRFQxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df8dc7fd-2dcb-45f4-955c-0854a79ccb49", "record_id": "flaws_cloudtrail:0000022:df8dc7fd-2dcb-45f4-955c-0854a79ccb49", "row_index": 22, "timestamp": "2019-07-12T09:55:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df8dc7fd-2dcb-45f4-955c-0854a79ccb49", "eventTime": "2019-07-12T09:55:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYT0sxQi8vamhoek51aHMyUE9kZ0VwbzBnVlhJTnFLdDFEZUdMQ2ZyRlNQVmQ1ZUorWVJ6cys2ZGhEalI0OVVnTXBVN2V2RW02L3RnTW9BdlVENExXR040Nno4SlNTZGlzbmxpQUVCVnN4U2RqTy91Zzd5UHgwZHpXV3d5NnRVSDVpL3hjMlpDWFpEcUNKd0hqYTZoaVdySzRkaVVsTldZQ2hnbDFWSzNXSldsMUd0cmQxODRYdlR1Y25vcVlHOGVKU1k1YVJJelJaOVUrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04b34329-1771-45bd-b61a-875fdf3f0d5c", "record_id": "flaws_cloudtrail:0000023:04b34329-1771-45bd-b61a-875fdf3f0d5c", "row_index": 23, "timestamp": "2019-07-12T09:55:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04b34329-1771-45bd-b61a-875fdf3f0d5c", "eventTime": "2019-07-12T09:55:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5TVo4YmlJL0d3WmdoRFhjejM1U1h6WkNRVkZJaGVhOHZlUG1Mb1pyKzA3SUxkNmR5dmxLdDBiWFRLUGEwSUMxV01TN1NkTXQ2WmNqVTVoRzkzNFJRUnJzc2pyY001UWJpU1I4Z2hhN09rK2lZMmVnMHRsUlFkY2lNcGpPcDhxcnlEMUlOa0I4ZmNsNXdadS8xbDNuNGdrNU9HRVdFbXRzdjNBRS91cEFjU3RFRHV6WGFoNlg2ZUIvaW1oYUNFeTZvK1Uya2xxblpnRFQxZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df8dc7fd-2dcb-45f4-955c-0854a79ccb49", "record_id": "flaws_cloudtrail:0000024:df8dc7fd-2dcb-45f4-955c-0854a79ccb49", "row_index": 24, "timestamp": "2019-07-12T09:55:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df8dc7fd-2dcb-45f4-955c-0854a79ccb49", "eventTime": "2019-07-12T09:55:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYT0sxQi8vamhoek51aHMyUE9kZ0VwbzBnVlhJTnFLdDFEZUdMQ2ZyRlNQVmQ1ZUorWVJ6cys2ZGhEalI0OVVnTXBVN2V2RW02L3RnTW9BdlVENExXR040Nno4SlNTZGlzbmxpQUVCVnN4U2RqTy91Zzd5UHgwZHpXV3d5NnRVSDVpL3hjMlpDWFpEcUNKd0hqYTZoaVdySzRkaVVsTldZQ2hnbDFWSzNXSldsMUd0cmQxODRYdlR1Y25vcVlHOGVKU1k1YVJJelJaOVUrdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31279f-4c4d-4867-af3e-734d537224b7", "record_id": "flaws_cloudtrail:0000025:31279f-4c4d-4867-af3e-734d537224b7", "row_index": 25, "timestamp": "2019-07-12T09:55:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31279f-4c4d-4867-af3e-734d537224b7", "eventTime": "2019-07-12T09:55:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2dTh4a0VoSGl1V1Vzcm82cXpCYUZPQTZZd2hYL3dieUhuKzhaTHJqSW1EQ3loL0tSejF4NUQ3RmI2VzZSeCtZdDRiRVV1cElUVUw5Q2I5dnMwaTBpZlMxdnl0TG5iU1VUaUlTaTVLaDJnU09FRnRTQ0U3MHdDQmhBY2dNM0xMeW5zWmpSekhkd0VaazdzWFIvSWIzTUpZTjl3am5BSFRxOUJLK1JDajdYU2t6clhmYjk4Q2FZUnlvc0svZnNLQXBjR1FIaUJFREE3YkQ1MWpoT3E2L1BLd3VEUnpvd0ZJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c04e80f-ca24-474f-855e-8f248e322487", "record_id": "flaws_cloudtrail:0000026:8c04e80f-ca24-474f-855e-8f248e322487", "row_index": 26, "timestamp": "2019-07-12T09:55:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c04e80f-ca24-474f-855e-8f248e322487", "eventTime": "2019-07-12T09:55:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoeExBeEZOZ1VlZG1PdFZpeCtUYytzV01LRHRhN3cycjBVeTAwYnl6Y1dwdy92cHJFNGM0NkFZbmFxb3pYdVRaTzAyOG1RREJRbmlyd3pvaUxjTVdpa1NxRGxpNExhZ1NpNTM3Rm9QQjRnVlM5VlF6UDFwSWtGSzhnSjZ3R0gwc2F4SDZISkpianp0TFgveEJtVFN2VTlqdDBCV2E1dFdxWEp5enVPalZzT3ZhUkpWMEliQXQ5RG80TlNMb3ZLZ2ZkN09wb0RWenQwOUlDU29nckJUQmhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31279f-4c4d-4867-af3e-734d537224b7", "record_id": "flaws_cloudtrail:0000027:31279f-4c4d-4867-af3e-734d537224b7", "row_index": 27, "timestamp": "2019-07-12T09:55:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1108, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31279f-4c4d-4867-af3e-734d537224b7", "eventTime": "2019-07-12T09:55:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2dTh4a0VoSGl1V1Vzcm82cXpCYUZPQTZZd2hYL3dieUhuKzhaTHJqSW1EQ3loL0tSejF4NUQ3RmI2VzZSeCtZdDRiRVV1cElUVUw5Q2I5dnMwaTBpZlMxdnl0TG5iU1VUaUlTaTVLaDJnU09FRnRTQ0U3MHdDQmhBY2dNM0xMeW5zWmpSekhkd0VaazdzWFIvSWIzTUpZTjl3am5BSFRxOUJLK1JDajdYU2t6clhmYjk4Q2FZUnlvc0svZnNLQXBjR1FIaUJFREE3YkQ1MWpoT3E2L1BLd3VEUnpvd0ZJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c04e80f-ca24-474f-855e-8f248e322487", "record_id": "flaws_cloudtrail:0000028:8c04e80f-ca24-474f-855e-8f248e322487", "row_index": 28, "timestamp": "2019-07-12T09:55:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c04e80f-ca24-474f-855e-8f248e322487", "eventTime": "2019-07-12T09:55:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoeExBeEZOZ1VlZG1PdFZpeCtUYytzV01LRHRhN3cycjBVeTAwYnl6Y1dwdy92cHJFNGM0NkFZbmFxb3pYdVRaTzAyOG1RREJRbmlyd3pvaUxjTVdpa1NxRGxpNExhZ1NpNTM3Rm9QQjRnVlM5VlF6UDFwSWtGSzhnSjZ3R0gwc2F4SDZISkpianp0TFgveEJtVFN2VTlqdDBCV2E1dFdxWEp5enVPalZzT3ZhUkpWMEliQXQ5RG80TlNMb3ZLZ2ZkN09wb0RWenQwOUlDU29nckJUQmhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27d551ae-0899-4c6d-afd6-553793fb", "record_id": "flaws_cloudtrail:0000029:27d551ae-0899-4c6d-afd6-553793fb", "row_index": 29, "timestamp": "2019-07-12T09:55:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27d551ae-0899-4c6d-afd6-553793fb", "eventTime": "2019-07-12T09:55:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjS0wydG1nNkVkUVVod21ETnRwa2F6WTZveFlxUUtsaUVVeE9wdUhpSkhZNTNzcnNPY0xlL3lNZnlwL0xTakdyczFBN0FaUkdPMWpxbzYrbThZenBydVltb09tYU9DK01ESWN5NW9tN1ZLZFhQMVpFbEhWN3RxNHZXZFJZcFhCbUNTeDNCNGVkZWw0ZDFWNFc2d2M2aVRoMk4zUFJGZ0l0MHlLdVZ2QjNGNm05Mm9rd2tRNGZqakpWZUpnYUJPLzh2QTRpVnA1ZmFkUVRDeTRqd3ZEa1hXeFp6ZFVkQXZnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27d551ae-0899-4c6d-afd6-553793fb", "record_id": "flaws_cloudtrail:0000030:27d551ae-0899-4c6d-afd6-553793fb", "row_index": 30, "timestamp": "2019-07-12T09:55:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1106, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27d551ae-0899-4c6d-afd6-553793fb", "eventTime": "2019-07-12T09:55:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjS0wydG1nNkVkUVVod21ETnRwa2F6WTZveFlxUUtsaUVVeE9wdUhpSkhZNTNzcnNPY0xlL3lNZnlwL0xTakdyczFBN0FaUkdPMWpxbzYrbThZenBydVltb09tYU9DK01ESWN5NW9tN1ZLZFhQMVpFbEhWN3RxNHZXZFJZcFhCbUNTeDNCNGVkZWw0ZDFWNFc2d2M2aVRoMk4zUFJGZ0l0MHlLdVZ2QjNGNm05Mm9rd2tRNGZqakpWZUpnYUJPLzh2QTRpVnA1ZmFkUVRDeTRqd3ZEa1hXeFp6ZFVkQXZnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1815f8be-5d18-4cb0-a300-a5953ff40eef", "record_id": "flaws_cloudtrail:0000031:1815f8be-5d18-4cb0-a300-a5953ff40eef", "row_index": 31, "timestamp": "2019-07-12T09:55:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1815f8be-5d18-4cb0-a300-a5953ff40eef", "eventTime": "2019-07-12T09:55:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiL2lrb1FWL0xxMHR5VGdockZ6TTdLTXZWMVQyNGxxZEw2aFZNYnRyaTVWS0NOU2k2MTIxN2lCdWMvWXlBKzZta3pCQXlYVzJ6bnh3UUo4clZMSzlzazNFZjJvenJnTTJUV0xxQkNkZUY4SlRvN0ZBS3BOcEFkSTQzRE0rb0tCNnZGelI4ZURSUWYveTlJc2lWQ1gxeEJCZ0d2TnBPQlNYRE5XZVkwdE9RUWdKSldvSUp2WGpIVVh3UDhZRm9jST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1815f8be-5d18-4cb0-a300-a5953ff40eef", "record_id": "flaws_cloudtrail:0000032:1815f8be-5d18-4cb0-a300-a5953ff40eef", "row_index": 32, "timestamp": "2019-07-12T09:55:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1815f8be-5d18-4cb0-a300-a5953ff40eef", "eventTime": "2019-07-12T09:55:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJiL2lrb1FWL0xxMHR5VGdockZ6TTdLTXZWMVQyNGxxZEw2aFZNYnRyaTVWS0NOU2k2MTIxN2lCdWMvWXlBKzZta3pCQXlYVzJ6bnh3UUo4clZMSzlzazNFZjJvenJnTTJUV0xxQkNkZUY4SlRvN0ZBS3BOcEFkSTQzRE0rb0tCNnZGelI4ZURSUWYveTlJc2lWQ1gxeEJCZ0d2TnBPQlNYRE5XZVkwdE9RUWdKSldvSUp2WGpIVVh3UDhZRm9jST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f66dd7e0-7970-4b99-84f3-4ac0696e236b", "record_id": "flaws_cloudtrail:0000033:f66dd7e0-7970-4b99-84f3-4ac0696e236b", "row_index": 33, "timestamp": "2019-07-12T09:55:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f66dd7e0-7970-4b99-84f3-4ac0696e236b", "eventTime": "2019-07-12T09:55:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjS00zdlQ5STd0TDNQNXpMRnNtdklSa09nRXhaYUxuOGxsVmx0QnBBSmVhc01xempKWTBHTFZGOWFoR1RNVys3TlRhc3pScGtNd0p6d25HTG5DNU43anF0Vm95YU1WZ2oxeUNuWmlrb2Z5K21lY1ZpSCt4d3hVZFN3UTk0Nk1MMC9ZZzBXWFFnNGttTHBHbmRkT0g4bUFwVzZuRUpNRVJSbDRrL3RPNHhVNy9rS29aVlk1WXZvb1dxd2xZd2JBaExxS1JTVitrcDN5eEZTamY4a1A2ZCtSRzRZVEREWTJJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f66dd7e0-7970-4b99-84f3-4ac0696e236b", "record_id": "flaws_cloudtrail:0000034:f66dd7e0-7970-4b99-84f3-4ac0696e236b", "row_index": 34, "timestamp": "2019-07-12T09:55:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f66dd7e0-7970-4b99-84f3-4ac0696e236b", "eventTime": "2019-07-12T09:55:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjS00zdlQ5STd0TDNQNXpMRnNtdklSa09nRXhaYUxuOGxsVmx0QnBBSmVhc01xempKWTBHTFZGOWFoR1RNVys3TlRhc3pScGtNd0p6d25HTG5DNU43anF0Vm95YU1WZ2oxeUNuWmlrb2Z5K21lY1ZpSCt4d3hVZFN3UTk0Nk1MMC9ZZzBXWFFnNGttTHBHbmRkT0g4bUFwVzZuRUpNRVJSbDRrL3RPNHhVNy9rS29aVlk1WXZvb1dxd2xZd2JBaExxS1JTVitrcDN5eEZTamY4a1A2ZCtSRzRZVEREWTJJPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026535e-876b-4bc6-84e9-18b4fca6f39c", "record_id": "flaws_cloudtrail:0000035:026535e-876b-4bc6-84e9-18b4fca6f39c", "row_index": 35, "timestamp": "2019-07-12T09:55:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026535e-876b-4bc6-84e9-18b4fca6f39c", "eventTime": "2019-07-12T09:55:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWaTRTNUh1b2lHbHU1dWhROXN6OHBQaEJPZnRMWDErODg4Mnc4Mlk1ajhwQ1Z5Q1BFbWtQQ29jN0YyWXA5Q2lrWjIvY0c1dHlqQUtKQXhFbkx1VWZBeVF2Q3k0bUVCb1k0YkhHeXpjZm9MV044TGdid1dBV1lZUDYzL2lUNXVjd0lDOWdLYWI5Y0s1S0N4NEpXRmRFYmphdVFBcU5DTktFdVQ1QmcySHUza3hzRDVYR3RQa2ZZUFNKSmx1eFhJQldPWThick9IV0dIb2NrVTJxS1NDN3p3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "026535e-876b-4bc6-84e9-18b4fca6f39c", "record_id": "flaws_cloudtrail:0000036:026535e-876b-4bc6-84e9-18b4fca6f39c", "row_index": 36, "timestamp": "2019-07-12T09:55:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "026535e-876b-4bc6-84e9-18b4fca6f39c", "eventTime": "2019-07-12T09:55:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJWaTRTNUh1b2lHbHU1dWhROXN6OHBQaEJPZnRMWDErODg4Mnc4Mlk1ajhwQ1Z5Q1BFbWtQQ29jN0YyWXA5Q2lrWjIvY0c1dHlqQUtKQXhFbkx1VWZBeVF2Q3k0bUVCb1k0YkhHeXpjZm9MV044TGdid1dBV1lZUDYzL2lUNXVjd0lDOWdLYWI5Y0s1S0N4NEpXRmRFYmphdVFBcU5DTktFdVQ1QmcySHUza3hzRDVYR3RQa2ZZUFNKSmx1eFhJQldPWThick9IV0dIb2NrVTJxS1NDN3p3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "361cc073-d80b-406f-a97d-8fd883b5f94a", "record_id": "flaws_cloudtrail:0000037:361cc073-d80b-406f-a97d-8fd883b5f94a", "row_index": 37, "timestamp": "2019-07-12T09:55:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "361cc073-d80b-406f-a97d-8fd883b5f94a", "eventTime": "2019-07-12T09:55:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzSEVsV0Fwb0Y2RVFLUjNSeU85eGFnanlFUXAxS1NUTjBCbGVuTEFkaHlQWmd6aWZ5K2t5Z2R2SEQwRGZjMTRsNER4TDl5eHUwa1hYdEg4MWZkZndXaWNsTklsOThqYlFIQUFXNlNUdGpyOVBqaFJoQ1doS3ZXZzFHYmdUL05sUXFwZjFOOEQzNFFOVVdxWVd3cy9KWk12Sys4WkhnQjh3VlppMGlkeFhwcWhqY3JReG5zY29zMEZTWTY4VGx6WW95RG5kZHRYTm5hK09ZY3FXOTUyaVRaa2pZY1EyVUhNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "361cc073-d80b-406f-a97d-8fd883b5f94a", "record_id": "flaws_cloudtrail:0000038:361cc073-d80b-406f-a97d-8fd883b5f94a", "row_index": 38, "timestamp": "2019-07-12T09:55:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "361cc073-d80b-406f-a97d-8fd883b5f94a", "eventTime": "2019-07-12T09:55:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzSEVsV0Fwb0Y2RVFLUjNSeU85eGFnanlFUXAxS1NUTjBCbGVuTEFkaHlQWmd6aWZ5K2t5Z2R2SEQwRGZjMTRsNER4TDl5eHUwa1hYdEg4MWZkZndXaWNsTklsOThqYlFIQUFXNlNUdGpyOVBqaFJoQ1doS3ZXZzFHYmdUL05sUXFwZjFOOEQzNFFOVVdxWVd3cy9KWk12Sys4WkhnQjh3VlppMGlkeFhwcWhqY3JReG5zY29zMEZTWTY4VGx6WW95RG5kZHRYTm5hK09ZY3FXOTUyaVRaa2pZY1EyVUhNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2755ffc8-56dd-4439-8d34-616492cd915", "record_id": "flaws_cloudtrail:0000039:2755ffc8-56dd-4439-8d34-616492cd915", "row_index": 39, "timestamp": "2019-07-12T09:55:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2755ffc8-56dd-4439-8d34-616492cd915", "eventTime": "2019-07-12T09:55:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUdGRYZkFLWTJ2OG1STUpDWU5EeVRJVXkyTTcyZWFHVVhrY3Z0L0toRmIrbEsyWGl6V1JwNDNzNnVsMUFMLzM5NmVoQlFjY1Q3a1RMd1IyVjBJb0xid3lCWUpnZFhYNWtITFYwbG1MVUpJNHhsSGd4ODQ5eExwRFJScW1pQW1oWVhhVXFFR0ZjK3Irb0lmZkpZZ2tPVkxpUGVlaC9UMjVJaXUySG5obVpyT3A3LytadHBtUkVwcVpaZW9LWTVkK3FsTGhoQ2VjeGhOa2VrMTlwaHVKN1d3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2755ffc8-56dd-4439-8d34-616492cd915", "record_id": "flaws_cloudtrail:0000040:2755ffc8-56dd-4439-8d34-616492cd915", "row_index": 40, "timestamp": "2019-07-12T09:55:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1097, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2755ffc8-56dd-4439-8d34-616492cd915", "eventTime": "2019-07-12T09:55:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUdGRYZkFLWTJ2OG1STUpDWU5EeVRJVXkyTTcyZWFHVVhrY3Z0L0toRmIrbEsyWGl6V1JwNDNzNnVsMUFMLzM5NmVoQlFjY1Q3a1RMd1IyVjBJb0xid3lCWUpnZFhYNWtITFYwbG1MVUpJNHhsSGd4ODQ5eExwRFJScW1pQW1oWVhhVXFFR0ZjK3Irb0lmZkpZZ2tPVkxpUGVlaC9UMjVJaXUySG5obVpyT3A3LytadHBtUkVwcVpaZW9LWTVkK3FsTGhoQ2VjeGhOa2VrMTlwaHVKN1d3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b0b2714-eb7c-44a3-a7b0-4540b60bb192", "record_id": "flaws_cloudtrail:0000041:4b0b2714-eb7c-44a3-a7b0-4540b60bb192", "row_index": 41, "timestamp": "2019-07-12T09:55:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b0b2714-eb7c-44a3-a7b0-4540b60bb192", "eventTime": "2019-07-12T09:55:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhUG1BT3lkbTJhamQrdTJJcHpnbnVkVEd1VXhnaW5hbUk4M05lY3lsVXN2dy9VM3ZGMCtmdVdTd2oxN2VxbkNDQzRnazhMczNTd21WRWEza0UxNWtYODBvZ1VOV09qN3NDWkE1aFF5ZEJjNStldC9lWVFzNlRicFpKNE9nYWVGWEEzbktWTGN0MmRiaHNzY01qUHBzZVl6NitjQzdBbEplcHh1VzhpbFdaQlBCckNPcllZOExDc0hSQ0xtVU1Ndz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "604a24e5-3e88-439b-b2ec-7d0efa7ed0ae", "record_id": "flaws_cloudtrail:0000042:604a24e5-3e88-439b-b2ec-7d0efa7ed0ae", "row_index": 42, "timestamp": "2019-07-12T09:55:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "604a24e5-3e88-439b-b2ec-7d0efa7ed0ae", "eventTime": "2019-07-12T09:55:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqaE12R0FCZFA3M0hEdHZMQnNwVEtGUWY3MEw2clVpd0x2R0NqTDhqd3dNWFhsQUsrVWFSVnoweDVyRVZ5MHZENGtOMkZ2MjRoVDlscy94UUpjRS9iRUNaWTNPSkg3d0o1dlNCaDJIQmNtZHIwM0NwTzlGU0N4cWFoVjBCdUh6bGNsaEpianZtbGR2Z3V6Zy83anBSTUZaWHFIdmlxdnZ3cUgrMDBXSmxFaWNJWE9hTW1wditHZ3ZHSWxSdWVodTJEL0tZT0dCbDdNWlhtT0VQZ3VDYjBhdUI3aWxBWXhRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b0b2714-eb7c-44a3-a7b0-4540b60bb192", "record_id": "flaws_cloudtrail:0000043:4b0b2714-eb7c-44a3-a7b0-4540b60bb192", "row_index": 43, "timestamp": "2019-07-12T09:55:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b0b2714-eb7c-44a3-a7b0-4540b60bb192", "eventTime": "2019-07-12T09:55:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhUG1BT3lkbTJhamQrdTJJcHpnbnVkVEd1VXhnaW5hbUk4M05lY3lsVXN2dy9VM3ZGMCtmdVdTd2oxN2VxbkNDQzRnazhMczNTd21WRWEza0UxNWtYODBvZ1VOV09qN3NDWkE1aFF5ZEJjNStldC9lWVFzNlRicFpKNE9nYWVGWEEzbktWTGN0MmRiaHNzY01qUHBzZVl6NitjQzdBbEplcHh1VzhpbFdaQlBCckNPcllZOExDc0hSQ0xtVU1Ndz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "604a24e5-3e88-439b-b2ec-7d0efa7ed0ae", "record_id": "flaws_cloudtrail:0000044:604a24e5-3e88-439b-b2ec-7d0efa7ed0ae", "row_index": 44, "timestamp": "2019-07-12T09:55:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "604a24e5-3e88-439b-b2ec-7d0efa7ed0ae", "eventTime": "2019-07-12T09:55:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJqaE12R0FCZFA3M0hEdHZMQnNwVEtGUWY3MEw2clVpd0x2R0NqTDhqd3dNWFhsQUsrVWFSVnoweDVyRVZ5MHZENGtOMkZ2MjRoVDlscy94UUpjRS9iRUNaWTNPSkg3d0o1dlNCaDJIQmNtZHIwM0NwTzlGU0N4cWFoVjBCdUh6bGNsaEpianZtbGR2Z3V6Zy83anBSTUZaWHFIdmlxdnZ3cUgrMDBXSmxFaWNJWE9hTW1wditHZ3ZHSWxSdWVodTJEL0tZT0dCbDdNWlhtT0VQZ3VDYjBhdUI3aWxBWXhRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3946f0e-fe7d-40f5-a2f8-c423b28f4ef9", "record_id": "flaws_cloudtrail:0000045:b3946f0e-fe7d-40f5-a2f8-c423b28f4ef9", "row_index": 45, "timestamp": "2019-07-12T09:55:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3946f0e-fe7d-40f5-a2f8-c423b28f4ef9", "eventTime": "2019-07-12T09:55:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3946f0e-fe7d-40f5-a2f8-c423b28f4ef9", "record_id": "flaws_cloudtrail:0000046:b3946f0e-fe7d-40f5-a2f8-c423b28f4ef9", "row_index": 46, "timestamp": "2019-07-12T09:55:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3946f0e-fe7d-40f5-a2f8-c423b28f4ef9", "eventTime": "2019-07-12T09:55:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c879b6fd-b1d9-42f4-a71a-dd06f52fb96c", "record_id": "flaws_cloudtrail:0000047:c879b6fd-b1d9-42f4-a71a-dd06f52fb96c", "row_index": 47, "timestamp": "2019-07-12T09:57:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c879b6fd-b1d9-42f4-a71a-dd06f52fb96c", "eventTime": "2019-07-12T09:57:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c879b6fd-b1d9-42f4-a71a-dd06f52fb96c", "record_id": "flaws_cloudtrail:0000048:c879b6fd-b1d9-42f4-a71a-dd06f52fb96c", "row_index": 48, "timestamp": "2019-07-12T09:57:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c879b6fd-b1d9-42f4-a71a-dd06f52fb96c", "eventTime": "2019-07-12T09:57:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0d5b8b6-73d0-4fd4-87ef-23a4be553480", "record_id": "flaws_cloudtrail:0000049:c0d5b8b6-73d0-4fd4-87ef-23a4be553480", "row_index": 49, "timestamp": "2019-07-12T09:57:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0d5b8b6-73d0-4fd4-87ef-23a4be553480", "eventTime": "2019-07-12T09:57:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtZ0pJRVhudHVsZ2oyRzJnaHgrajZUS29oY3FVNEtOeWx2YWoxZm9Udk5obkptUWZYWUdIVDdMQlpsOC80anBkbmdJRkJnQVVITStZc2lieDk4eGU5SDR6RDJCdXBwOXdTemdLMnNKY29DdWdQY1UvR01BT1R3RFFVQ3FaWm5uMkRiUWtQR0ZKenFoZld3cXRKREthK2oxUTl3dnhUL1p1Vi83MG5CSXNIcUV3VXFCbGF4WGxFc1hSN1pGUjB2MWZhMExDTXdVVm1hTG1mUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0d5b8b6-73d0-4fd4-87ef-23a4be553480", "record_id": "flaws_cloudtrail:0000050:c0d5b8b6-73d0-4fd4-87ef-23a4be553480", "row_index": 50, "timestamp": "2019-07-12T09:57:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0d5b8b6-73d0-4fd4-87ef-23a4be553480", "eventTime": "2019-07-12T09:57:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJtZ0pJRVhudHVsZ2oyRzJnaHgrajZUS29oY3FVNEtOeWx2YWoxZm9Udk5obkptUWZYWUdIVDdMQlpsOC80anBkbmdJRkJnQVVITStZc2lieDk4eGU5SDR6RDJCdXBwOXdTemdLMnNKY29DdWdQY1UvR01BT1R3RFFVQ3FaWm5uMkRiUWtQR0ZKenFoZld3cXRKREthK2oxUTl3dnhUL1p1Vi83MG5CSXNIcUV3VXFCbGF4WGxFc1hSN1pGUjB2MWZhMExDTXdVVm1hTG1mUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec0ee10f-1b1a-4b89-9e60-1b8a6056eeac", "record_id": "flaws_cloudtrail:0000051:ec0ee10f-1b1a-4b89-9e60-1b8a6056eeac", "row_index": 51, "timestamp": "2019-07-12T09:57:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec0ee10f-1b1a-4b89-9e60-1b8a6056eeac", "eventTime": "2019-07-12T09:57:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5WHFvUlJLcFgrbElweXdaUUNDYVNpTGZsWkpOQVJSZWJBS1p2UzNHc3ltQkFsRy9lN3lvcm5IY1E4WWRhVnlBU0VhVWRrV1JiL2xYaG5ORllLZTBuQU5kQVBqQlJWZGwvck10SjZiV2F3R3ZNNmV6c1Z3UXJZYmVHMklpNi9SeDY1aEgyWUZnY0hqUFVmTjl5NXA0RmNCVUtUcEpQcHZpZmhyL3hDOWc2UEpaYnBlaUViZFBYN2hwQ1JSbno1S0t4U2NoTE5ZUHlOMlBoZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec0ee10f-1b1a-4b89-9e60-1b8a6056eeac", "record_id": "flaws_cloudtrail:0000052:ec0ee10f-1b1a-4b89-9e60-1b8a6056eeac", "row_index": 52, "timestamp": "2019-07-12T09:57:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec0ee10f-1b1a-4b89-9e60-1b8a6056eeac", "eventTime": "2019-07-12T09:57:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5WHFvUlJLcFgrbElweXdaUUNDYVNpTGZsWkpOQVJSZWJBS1p2UzNHc3ltQkFsRy9lN3lvcm5IY1E4WWRhVnlBU0VhVWRrV1JiL2xYaG5ORllLZTBuQU5kQVBqQlJWZGwvck10SjZiV2F3R3ZNNmV6c1Z3UXJZYmVHMklpNi9SeDY1aEgyWUZnY0hqUFVmTjl5NXA0RmNCVUtUcEpQcHZpZmhyL3hDOWc2UEpaYnBlaUViZFBYN2hwQ1JSbno1S0t4U2NoTE5ZUHlOMlBoZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6473ecb5-1de7-45c5-b00a-d42da69e70b1", "record_id": "flaws_cloudtrail:0000053:6473ecb5-1de7-45c5-b00a-d42da69e70b1", "row_index": 53, "timestamp": "2019-07-12T09:57:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6473ecb5-1de7-45c5-b00a-d42da69e70b1", "eventTime": "2019-07-12T09:57:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3ZlZxbHdNUDNtbXUrK0NDT3JFVTN6SWZxNFpxazhvMERBTkkzSlJteVdrOUNNS3plcVBTZHY4UTFPMzNTcTVoZzl6aUJDOWN4TlhTYWMra2s0eVk0aUFVaWlZaFB3VWtTR01YaDhsbVNneUFKVmZUcmxoTTJpM3dydCtkQ3dRd1ZVc0Q4cjM0d1JnbVgvTE9GUjJXS1lzRlVmclRRZ0MzYnZlVTBMV0p0OHkyYkV2MVZzWUMwSVp2L084YnhDSURpZEJTOHQyU21Hb3oyQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6473ecb5-1de7-45c5-b00a-d42da69e70b1", "record_id": "flaws_cloudtrail:0000054:6473ecb5-1de7-45c5-b00a-d42da69e70b1", "row_index": 54, "timestamp": "2019-07-12T09:57:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6473ecb5-1de7-45c5-b00a-d42da69e70b1", "eventTime": "2019-07-12T09:57:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3ZlZxbHdNUDNtbXUrK0NDT3JFVTN6SWZxNFpxazhvMERBTkkzSlJteVdrOUNNS3plcVBTZHY4UTFPMzNTcTVoZzl6aUJDOWN4TlhTYWMra2s0eVk0aUFVaWlZaFB3VWtTR01YaDhsbVNneUFKVmZUcmxoTTJpM3dydCtkQ3dRd1ZVc0Q4cjM0d1JnbVgvTE9GUjJXS1lzRlVmclRRZ0MzYnZlVTBMV0p0OHkyYkV2MVZzWUMwSVp2L084YnhDSURpZEJTOHQyU21Hb3oyQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "767d63d4-f71d-4846-9758-8bd46bd8738c", "record_id": "flaws_cloudtrail:0000055:767d63d4-f71d-4846-9758-8bd46bd8738c", "row_index": 55, "timestamp": "2019-07-12T09:57:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "767d63d4-f71d-4846-9758-8bd46bd8738c", "eventTime": "2019-07-12T09:57:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxemxqTTI5TmV2ckEvenIxN0VhSUtUbEI5MkplZ0ZwQlZlekp2RDl2TmEzSU5BTWMvQk1ZeWFzUkI4MDEzNFRsekh1eG44YkVBMFdkZVMyODl1NTJZQ3pobjlLSy9CcURnMFBmTEkxWGlYMHZtVWQwTFJCN0hSdkhYR3JuMzZ2MFBleFlYZHpYQ2Vybzd1VVZjd1dUbEtWWE4xc2lmWVFvSVBTUkFZcFZEdFlPWDNibE5QRHpERXdQL3FSWnpmVnZ6NFF4cGpZd1hnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "767d63d4-f71d-4846-9758-8bd46bd8738c", "record_id": "flaws_cloudtrail:0000056:767d63d4-f71d-4846-9758-8bd46bd8738c", "row_index": 56, "timestamp": "2019-07-12T09:57:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1083, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "767d63d4-f71d-4846-9758-8bd46bd8738c", "eventTime": "2019-07-12T09:57:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxemxqTTI5TmV2ckEvenIxN0VhSUtUbEI5MkplZ0ZwQlZlekp2RDl2TmEzSU5BTWMvQk1ZeWFzUkI4MDEzNFRsekh1eG44YkVBMFdkZVMyODl1NTJZQ3pobjlLSy9CcURnMFBmTEkxWGlYMHZtVWQwTFJCN0hSdkhYR3JuMzZ2MFBleFlYZHpYQ2Vybzd1VVZjd1dUbEtWWE4xc2lmWVFvSVBTUkFZcFZEdFlPWDNibE5QRHpERXdQL3FSWnpmVnZ6NFF4cGpZd1hnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0105c15d-9093-4992-92c1-4136bf889f83", "record_id": "flaws_cloudtrail:0000057:0105c15d-9093-4992-92c1-4136bf889f83", "row_index": 57, "timestamp": "2019-07-12T09:57:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0105c15d-9093-4992-92c1-4136bf889f83", "eventTime": "2019-07-12T09:57:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJseThGWnNhRDQxdVE1ejhKVERiNno1MkU0elBlQmxYWHE5OFd6TGZudmtVZEI3elZsVnZMMzFoazhtaFFYbGxrdHd6QmxNdktiejdsN0VPbnRoa3NBTUJtazFhRFdxT09Ma3NObndqWitjd3ZmWEZ4UG5WV2FlRHJPNm1qQWpOZEJOVEFnWTYzTlFzbWFtRVp4TE9weUdKdSttWUdGNnQ1M2ltVjBMVjhhZkRSa3QvSzk5dityYm5FWXliSk9nUUxyWC81bVZRSG1VcmF1UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0105c15d-9093-4992-92c1-4136bf889f83", "record_id": "flaws_cloudtrail:0000058:0105c15d-9093-4992-92c1-4136bf889f83", "row_index": 58, "timestamp": "2019-07-12T09:57:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0105c15d-9093-4992-92c1-4136bf889f83", "eventTime": "2019-07-12T09:57:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJseThGWnNhRDQxdVE1ejhKVERiNno1MkU0elBlQmxYWHE5OFd6TGZudmtVZEI3elZsVnZMMzFoazhtaFFYbGxrdHd6QmxNdktiejdsN0VPbnRoa3NBTUJtazFhRFdxT09Ma3NObndqWitjd3ZmWEZ4UG5WV2FlRHJPNm1qQWpOZEJOVEFnWTYzTlFzbWFtRVp4TE9weUdKdSttWUdGNnQ1M2ltVjBMVjhhZkRSa3QvSzk5dityYm5FWXliSk9nUUxyWC81bVZRSG1VcmF1UT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e5595ce-76bf-4315-bc15-484db9c15da7", "record_id": "flaws_cloudtrail:0000059:2e5595ce-76bf-4315-bc15-484db9c15da7", "row_index": 59, "timestamp": "2019-07-12T09:57:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e5595ce-76bf-4315-bc15-484db9c15da7", "eventTime": "2019-07-12T09:57:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2VDBzbjZsajNuajRaNHFQWStZZjF1NnVTYjhBckc3cUlRaGhneHdleEdjbG11NDZCZTZrVVNOcTR2RGJBVnFRSE0zbjMyN1hFNndwaGNqZFBmcUxERkd3L1l1b1VXUm4yMUIxVDl3ZmpTWDQ5Y01DV3FRSy9XL2loaks1TSsxSU8wV256TXlnSkFHL252VG9LemxTSnBUZHg0ZlRzc25KR1hWdDd3WWo4M3Q0VHVrUm5JNzl3U3ZyYmkva1ZBeDZwSzlmUzgreEZNdmpsQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e5595ce-76bf-4315-bc15-484db9c15da7", "record_id": "flaws_cloudtrail:0000060:2e5595ce-76bf-4315-bc15-484db9c15da7", "row_index": 60, "timestamp": "2019-07-12T09:57:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e5595ce-76bf-4315-bc15-484db9c15da7", "eventTime": "2019-07-12T09:57:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI2VDBzbjZsajNuajRaNHFQWStZZjF1NnVTYjhBckc3cUlRaGhneHdleEdjbG11NDZCZTZrVVNOcTR2RGJBVnFRSE0zbjMyN1hFNndwaGNqZFBmcUxERkd3L1l1b1VXUm4yMUIxVDl3ZmpTWDQ5Y01DV3FRSy9XL2loaks1TSsxSU8wV256TXlnSkFHL252VG9LemxTSnBUZHg0ZlRzc25KR1hWdDd3WWo4M3Q0VHVrUm5JNzl3U3ZyYmkva1ZBeDZwSzlmUzgreEZNdmpsQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e61e9e25-bd6c-4629-b216-876b0f0c635c", "record_id": "flaws_cloudtrail:0000061:e61e9e25-bd6c-4629-b216-876b0f0c635c", "row_index": 61, "timestamp": "2019-07-12T09:57:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e61e9e25-bd6c-4629-b216-876b0f0c635c", "eventTime": "2019-07-12T09:57:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUNkhzRnFhbXBvbjM3RW1DaUF5R0RlS0I0UmNpNGNoRWFRam5wNWRHaS85U0NJS2FOeUdZME9kNlBjWVRheTl0OGhPbFNTa01rTjFia3JnTzZOMU5DWE82djYzR2h1bHRsRTA4dWw1TU1BNFlkY1F6WEtxcWplRHcrUm05S0dzak1ZOGROQ2NoMEVNb3JiVlBCSDNGdHFoOEJqRzYwcCtSRWdnRHpkUmN3eXpXNmNSa1dDWVBpU1VzTWtXdkYrYkllcUxvSnZ2TUpHTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e61e9e25-bd6c-4629-b216-876b0f0c635c", "record_id": "flaws_cloudtrail:0000062:e61e9e25-bd6c-4629-b216-876b0f0c635c", "row_index": 62, "timestamp": "2019-07-12T09:57:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e61e9e25-bd6c-4629-b216-876b0f0c635c", "eventTime": "2019-07-12T09:57:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJUNkhzRnFhbXBvbjM3RW1DaUF5R0RlS0I0UmNpNGNoRWFRam5wNWRHaS85U0NJS2FOeUdZME9kNlBjWVRheTl0OGhPbFNTa01rTjFia3JnTzZOMU5DWE82djYzR2h1bHRsRTA4dWw1TU1BNFlkY1F6WEtxcWplRHcrUm05S0dzak1ZOGROQ2NoMEVNb3JiVlBCSDNGdHFoOEJqRzYwcCtSRWdnRHpkUmN3eXpXNmNSa1dDWVBpU1VzTWtXdkYrYkllcUxvSnZ2TUpHTT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d766302-e88e-44fc-8cfc-7301faba6416", "record_id": "flaws_cloudtrail:0000063:a0d766302-e88e-44fc-8cfc-7301faba6416", "row_index": 63, "timestamp": "2019-07-12T09:57:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d766302-e88e-44fc-8cfc-7301faba6416", "eventTime": "2019-07-12T09:57:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuMlhEeitpNWdPTDFpb2QxUXVWcHNXS1N2UzlLMDdxT0hCRDgvaWMyV3A2WDNlcUUrSkl3UXg3WTFVV2pmMVhvR09LR0ZCMUpjdDR4aFhvWjhiRURtODN5akJmL0NXRXBxSmpSNm5QeGNObWt5ZXlWN3NGZ2ZXU3VJUHQrREFCeE13REZKZXJES01oalRaOU9aL3BTajI4aG8yNVpQcjNOckh2ekxFdlQ4ajRERGVIaFYxcUR4NDRsZmtpZkh6Q0h1UXptOXpYaDZTLytOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0d766302-e88e-44fc-8cfc-7301faba6416", "record_id": "flaws_cloudtrail:0000064:a0d766302-e88e-44fc-8cfc-7301faba6416", "row_index": 64, "timestamp": "2019-07-12T09:57:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1094, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0d766302-e88e-44fc-8cfc-7301faba6416", "eventTime": "2019-07-12T09:57:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuMlhEeitpNWdPTDFpb2QxUXVWcHNXS1N2UzlLMDdxT0hCRDgvaWMyV3A2WDNlcUUrSkl3UXg3WTFVV2pmMVhvR09LR0ZCMUpjdDR4aFhvWjhiRURtODN5akJmL0NXRXBxSmpSNm5QeGNObWt5ZXlWN3NGZ2ZXU3VJUHQrREFCeE13REZKZXJES01oalRaOU9aL3BTajI4aG8yNVpQcjNOckh2ekxFdlQ4ajRERGVIaFYxcUR4NDRsZmtpZkh6Q0h1UXptOXpYaDZTLytOdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d503b1e-4ab6-4b93-8b86-fb7d926490c", "record_id": "flaws_cloudtrail:0000065:0d503b1e-4ab6-4b93-8b86-fb7d926490c", "row_index": 65, "timestamp": "2019-07-12T09:57:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d503b1e-4ab6-4b93-8b86-fb7d926490c", "eventTime": "2019-07-12T09:57:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJleVA3djhDN1dnR2k3RE5ka1F5dXJCSzlHdW5Cd0MrY3JDazM4aVg4TVJaZER4Snlmdnk0b3pGbm5TZGg1MkhtaDhhZ3VjSXhDSDYzWG44UU5pQlFqOGduY3dpdlp0RXo4d0Fpd1hpQWNvZ0Y4Q0tsNzVGMGpvV0d2bVJ0L25TMjRMd2s5aURvRFdXYjE3T0JjQ1VZVW1KcEtQV01qY09vZWhsSWdOR21MNVNnV3ZKU3UySFhzek5hMjlOYkc0dzAwdWlNc2FIN2h3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d503b1e-4ab6-4b93-8b86-fb7d926490c", "record_id": "flaws_cloudtrail:0000066:0d503b1e-4ab6-4b93-8b86-fb7d926490c", "row_index": 66, "timestamp": "2019-07-12T09:57:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d503b1e-4ab6-4b93-8b86-fb7d926490c", "eventTime": "2019-07-12T09:57:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJleVA3djhDN1dnR2k3RE5ka1F5dXJCSzlHdW5Cd0MrY3JDazM4aVg4TVJaZER4Snlmdnk0b3pGbm5TZGg1MkhtaDhhZ3VjSXhDSDYzWG44UU5pQlFqOGduY3dpdlp0RXo4d0Fpd1hpQWNvZ0Y4Q0tsNzVGMGpvV0d2bVJ0L25TMjRMd2s5aURvRFdXYjE3T0JjQ1VZVW1KcEtQV01qY09vZWhsSWdOR21MNVNnV3ZKU3UySFhzek5hMjlOYkc0dzAwdWlNc2FIN2h3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65932-a78c-4297-86d5-67f4d16b5996", "record_id": "flaws_cloudtrail:0000067:65932-a78c-4297-86d5-67f4d16b5996", "row_index": 67, "timestamp": "2019-07-12T09:57:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "[aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65932-a78c-4297-86d5-67f4d16b5996", "eventTime": "2019-07-12T09:57:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "[aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-east-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c521099-b014-4ae3-a1d6-7bcdbd9d4506", "record_id": "flaws_cloudtrail:0000068:c521099-b014-4ae3-a1d6-7bcdbd9d4506", "row_index": 68, "timestamp": "2019-07-12T09:57:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c521099-b014-4ae3-a1d6-7bcdbd9d4506", "eventTime": "2019-07-12T09:57:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDbnFtOWRRUlNvL3lvVWNBWnBkRjUrQ0xoelRJZFdrNVhTT1RQSDJUK2tneUliRllicVkvQlQ4Z2dmdk1hdCtiVStwMUp0UktLNjJaYTd1eGFwbHovUy9VKzNnU0J2eFVaczl2NWUxc2FBbEUwMzcyditQYXlWdTY1MzlObW5EZENtV0tEMXJnTDMwMHRyR2lWMDBKUWN2L243OFpUWkVxaGw2eDhXSHJ6bWxLV3Y1WW5QZWRQckJtVnZoTTdnTXc2UTk0Ni9zY2pOdlJvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65932-a78c-4297-86d5-67f4d16b5996", "record_id": "flaws_cloudtrail:0000069:65932-a78c-4297-86d5-67f4d16b5996", "row_index": 69, "timestamp": "2019-07-12T09:57:49Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "[aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65932-a78c-4297-86d5-67f4d16b5996", "eventTime": "2019-07-12T09:57:49Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "[aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187]", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-east-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c521099-b014-4ae3-a1d6-7bcdbd9d4506", "record_id": "flaws_cloudtrail:0000070:c521099-b014-4ae3-a1d6-7bcdbd9d4506", "row_index": 70, "timestamp": "2019-07-12T09:57:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c521099-b014-4ae3-a1d6-7bcdbd9d4506", "eventTime": "2019-07-12T09:57:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDbnFtOWRRUlNvL3lvVWNBWnBkRjUrQ0xoelRJZFdrNVhTT1RQSDJUK2tneUliRllicVkvQlQ4Z2dmdk1hdCtiVStwMUp0UktLNjJaYTd1eGFwbHovUy9VKzNnU0J2eFVaczl2NWUxc2FBbEUwMzcyditQYXlWdTY1MzlObW5EZENtV0tEMXJnTDMwMHRyR2lWMDBKUWN2L243OFpUWkVxaGw2eDhXSHJ6bWxLV3Y1WW5QZWRQckJtVnZoTTdnTXc2UTk0Ni9zY2pOdlJvQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd9c71bc-0f93-49e7-8132-917415c38810", "record_id": "flaws_cloudtrail:0000071:fd9c71bc-0f93-49e7-8132-917415c38810", "row_index": 71, "timestamp": "2019-07-12T09:57:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd9c71bc-0f93-49e7-8132-917415c38810", "eventTime": "2019-07-12T09:57:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmYnE4VkxyMTJvOXNiaEg3dG5ybWRxcFl1cHVleURzdDNUVUV4RVRHbDNoSE45ZVBRYUpTK09DV0kwTWpWK1F3SjlQTzIrSldPZjBscTFiaDNwZ05pZHIveWkzbVFLQnk0c0w1eWJJYTJLcGZ3OFJEbno3cmxUbVREaEEyQVJ4RjlrS0ZFeWN5azkwVlgySVhaWTdYazRTaG8vMEZ5c1JkRkh5TVZRN1JiV0U4dDZPY2RyWXFxeXN6ZmgxMlBNc1JZQkJwRytzcGJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd9c71bc-0f93-49e7-8132-917415c38810", "record_id": "flaws_cloudtrail:0000072:fd9c71bc-0f93-49e7-8132-917415c38810", "row_index": 72, "timestamp": "2019-07-12T09:57:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd9c71bc-0f93-49e7-8132-917415c38810", "eventTime": "2019-07-12T09:57:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJmYnE4VkxyMTJvOXNiaEg3dG5ybWRxcFl1cHVleURzdDNUVUV4RVRHbDNoSE45ZVBRYUpTK09DV0kwTWpWK1F3SjlQTzIrSldPZjBscTFiaDNwZ05pZHIveWkzbVFLQnk0c0w1eWJJYTJLcGZ3OFJEbno3cmxUbVREaEEyQVJ4RjlrS0ZFeWN5azkwVlgySVhaWTdYazRTaG8vMEZ5c1JkRkh5TVZRN1JiV0U4dDZPY2RyWXFxeXN6ZmgxMlBNc1JZQkJwRytzcGJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccade087-cd9f-4d9b-8dfe-a8742c8d8486", "record_id": "flaws_cloudtrail:0000073:ccade087-cd9f-4d9b-8dfe-a8742c8d8486", "row_index": 73, "timestamp": "2019-07-12T09:57:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccade087-cd9f-4d9b-8dfe-a8742c8d8486", "eventTime": "2019-07-12T09:57:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkS0pPeVlmK2gxNWZ5TVpOZ2hUeElWQjFrZ0Vib09Nek5IK0NDR2xMM1YwNllZU1U2MHBFNWxFVWRlb2JTZkF1VTFrN3Z3bFlaNmk4QzdaaFR5RVlZUUlYVkZOM2VzNjJ4LzM5RjdrVkZRQ244YlphNHRKWU9HT2dWaUUwQWpzWnFRMTVYT0Izd2QxNFBZdnF6ck9JSU5ZYVNQVENwTFVsOTczUEhzcnJQc2RubHlsYllUSnM1MGVRL0FiSHZSMjNHdk1QMUJLcUJvQXRMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccade087-cd9f-4d9b-8dfe-a8742c8d8486", "record_id": "flaws_cloudtrail:0000074:ccade087-cd9f-4d9b-8dfe-a8742c8d8486", "row_index": 74, "timestamp": "2019-07-12T09:57:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccade087-cd9f-4d9b-8dfe-a8742c8d8486", "eventTime": "2019-07-12T09:57:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkS0pPeVlmK2gxNWZ5TVpOZ2hUeElWQjFrZ0Vib09Nek5IK0NDR2xMM1YwNllZU1U2MHBFNWxFVWRlb2JTZkF1VTFrN3Z3bFlaNmk4QzdaaFR5RVlZUUlYVkZOM2VzNjJ4LzM5RjdrVkZRQ244YlphNHRKWU9HT2dWaUUwQWpzWnFRMTVYT0Izd2QxNFBZdnF6ck9JSU5ZYVNQVENwTFVsOTczUEhzcnJQc2RubHlsYllUSnM1MGVRL0FiSHZSMjNHdk1QMUJLcUJvQXRMQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd5fa82-5006-4a11-a14a-69f454144502", "record_id": "flaws_cloudtrail:0000075:1fd5fa82-5006-4a11-a14a-69f454144502", "row_index": 75, "timestamp": "2019-07-12T09:57:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd5fa82-5006-4a11-a14a-69f454144502", "eventTime": "2019-07-12T09:57:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNZ1FmVzZpdU9XUXVBNXNncUE2K21CeWJiaFBoOGtoV2xVdEh0WXo1QlNweHdCL3BWU2xWQVdVejNudWsvL0l0UmxKVnUzVnRscXo0Rmt0UVhxMnVsVG56ZDFlOGJ3VUpUOUcvTXk5RjZoVDNXQ1JlUTdZdk5kSEtWRDVSVFJxbU5KVit1RjlsRkMvZndCL0FuQUFGRFlYTHFRdlNaSk9LcmhqZFZVRDUzMG5sQmJkVHJaekpWQmZEU2RlSnl0djVlbEFJUUk3R3NTRG56QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd5fa82-5006-4a11-a14a-69f454144502", "record_id": "flaws_cloudtrail:0000076:1fd5fa82-5006-4a11-a14a-69f454144502", "row_index": 76, "timestamp": "2019-07-12T09:57:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd5fa82-5006-4a11-a14a-69f454144502", "eventTime": "2019-07-12T09:57:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNZ1FmVzZpdU9XUXVBNXNncUE2K21CeWJiaFBoOGtoV2xVdEh0WXo1QlNweHdCL3BWU2xWQVdVejNudWsvL0l0UmxKVnUzVnRscXo0Rmt0UVhxMnVsVG56ZDFlOGJ3VUpUOUcvTXk5RjZoVDNXQ1JlUTdZdk5kSEtWRDVSVFJxbU5KVit1RjlsRkMvZndCL0FuQUFGRFlYTHFRdlNaSk9LcmhqZFZVRDUzMG5sQmJkVHJaekpWQmZEU2RlSnl0djVlbEFJUUk3R3NTRG56QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61dfbe82-8951-4b92-a264-60d939524", "record_id": "flaws_cloudtrail:0000077:61dfbe82-8951-4b92-a264-60d939524", "row_index": 77, "timestamp": "2019-07-12T09:57:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61dfbe82-8951-4b92-a264-60d939524", "eventTime": "2019-07-12T09:57:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnelEvc1k5ck9aSEpNOE0vN2RIZSsrQks1MSsxdjRMYnNkRWJINmcwbDBqdFpya053ODdVYnpKTkozTWJ6TFNiQkpnbC9jRzZsMjZhMHVFRGNVbGJBWFUzNUVodUpnWTdJOWxDZ1FVWTBxRlhIZ1lteEJ1OUhPZk9tWGFhemR2OVlpRHFrMG5pS1RKcDdQQkovb3NRQXNHaFYra3VHSmJPZ3BReGFjMzcvZk90NDZ4RHlJZktlUEJLSFhiTXNFK0hRRFMxdXV0bnVkTGlUUnpUd0VuVG8zSDFQOUdJN1hzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62cc82ae-61ea-4125-a694-8fec9fd72359", "record_id": "flaws_cloudtrail:0000078:62cc82ae-61ea-4125-a694-8fec9fd72359", "row_index": 78, "timestamp": "2019-07-12T09:57:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62cc82ae-61ea-4125-a694-8fec9fd72359", "eventTime": "2019-07-12T09:57:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIybGc2cktIcEE1eUlNUm40WVdZM042MjU3aE9BSHB1R3NlWWpyQ0tDTURWR0dxZzRpdHQyWTNNTjZsOTVWa2hkSlpTSnRBQUFzbnU3TE1jV0t4bUlBZktVTXJ0dXZxYmlmRnZkb1BvU0V0bTI5QWlpbHlPdVE0UnNtVWc3T3VpazhPNERra1hxWjg0MjB1UGZmZllCV2QxQUdGdWRJRFZYMTJZWTBYbFE3aWp1cFY3RnRCenNoZ0NuTWt3VWRUSGlMa3lxR2l4MStFVGFDR2pVSHNnbitRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61dfbe82-8951-4b92-a264-60d939524", "record_id": "flaws_cloudtrail:0000079:61dfbe82-8951-4b92-a264-60d939524", "row_index": 79, "timestamp": "2019-07-12T09:57:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61dfbe82-8951-4b92-a264-60d939524", "eventTime": "2019-07-12T09:57:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJnelEvc1k5ck9aSEpNOE0vN2RIZSsrQks1MSsxdjRMYnNkRWJINmcwbDBqdFpya053ODdVYnpKTkozTWJ6TFNiQkpnbC9jRzZsMjZhMHVFRGNVbGJBWFUzNUVodUpnWTdJOWxDZ1FVWTBxRlhIZ1lteEJ1OUhPZk9tWGFhemR2OVlpRHFrMG5pS1RKcDdQQkovb3NRQXNHaFYra3VHSmJPZ3BReGFjMzcvZk90NDZ4RHlJZktlUEJLSFhiTXNFK0hRRFMxdXV0bnVkTGlUUnpUd0VuVG8zSDFQOUdJN1hzPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62cc82ae-61ea-4125-a694-8fec9fd72359", "record_id": "flaws_cloudtrail:0000080:62cc82ae-61ea-4125-a694-8fec9fd72359", "row_index": 80, "timestamp": "2019-07-12T09:57:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62cc82ae-61ea-4125-a694-8fec9fd72359", "eventTime": "2019-07-12T09:57:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIybGc2cktIcEE1eUlNUm40WVdZM042MjU3aE9BSHB1R3NlWWpyQ0tDTURWR0dxZzRpdHQyWTNNTjZsOTVWa2hkSlpTSnRBQUFzbnU3TE1jV0t4bUlBZktVTXJ0dXZxYmlmRnZkb1BvU0V0bTI5QWlpbHlPdVE0UnNtVWc3T3VpazhPNERra1hxWjg0MjB1UGZmZllCV2QxQUdGdWRJRFZYMTJZWTBYbFE3aWp1cFY3RnRCenNoZ0NuTWt3VWRUSGlMa3lxR2l4MStFVGFDR2pVSHNnbitRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0dc553c-ddaf-44d3-bd38-a1b20dde21d4", "record_id": "flaws_cloudtrail:0000081:d0dc553c-ddaf-44d3-bd38-a1b20dde21d4", "row_index": 81, "timestamp": "2019-07-12T09:57:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0dc553c-ddaf-44d3-bd38-a1b20dde21d4", "eventTime": "2019-07-12T09:57:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoKzlnMFh6SFJFTE0yS2dyZGVKdjhBMlp2YjVTVU5WdWZydnZhaHoyM3RibjJRVDlsMVQ3bjZCVGoyR0V4VTFhalZPTDByNm9DdTIwK1d2MDFGVVNSNHNRbkpub0MxWFBxcDlITzRSR1lWenpzZlY2d3ljbEszYmw1dGlQSHFqOVlNdUtUSVppby9qNGRzcm90MG5KdlRhaERkV3ZsUmgycE5ZU05pRTh1cTRwQVE0dU1YVWVBYU80MFVxYkJiTFhkZHB2YWtIbnIvY3FMY2hLYjZvU2VWa0xhWHdrMnVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0dc553c-ddaf-44d3-bd38-a1b20dde21d4", "record_id": "flaws_cloudtrail:0000082:d0dc553c-ddaf-44d3-bd38-a1b20dde21d4", "row_index": 82, "timestamp": "2019-07-12T09:57:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0dc553c-ddaf-44d3-bd38-a1b20dde21d4", "eventTime": "2019-07-12T09:57:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJoKzlnMFh6SFJFTE0yS2dyZGVKdjhBMlp2YjVTVU5WdWZydnZhaHoyM3RibjJRVDlsMVQ3bjZCVGoyR0V4VTFhalZPTDByNm9DdTIwK1d2MDFGVVNSNHNRbkpub0MxWFBxcDlITzRSR1lWenpzZlY2d3ljbEszYmw1dGlQSHFqOVlNdUtUSVppby9qNGRzcm90MG5KdlRhaERkV3ZsUmgycE5ZU05pRTh1cTRwQVE0dU1YVWVBYU80MFVxYkJiTFhkZHB2YWtIbnIvY3FMY2hLYjZvU2VWa0xhWHdrMnVRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75fbfc3c-a24a-46ed-9b06-6b74b22c9156", "record_id": "flaws_cloudtrail:0000083:75fbfc3c-a24a-46ed-9b06-6b74b22c9156", "row_index": 83, "timestamp": "2019-07-12T09:57:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75fbfc3c-a24a-46ed-9b06-6b74b22c9156", "eventTime": "2019-07-12T09:57:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQRTJMTzd2QTVLZEJNY3k5U0FkY3l6VVE5S1orWlUyZTI4Zm9aaVFtbzNDYWE5MGhveENmWldyNVE5bFErMDNGRzRjSE0xK2xTME1ublBrakd2T1RXaVZsdHIrM2phSVYvMUw2OXY2TDBVaVZDT29XdFNOcUlETkw3Vjg2MjNLYWNpTTA2SU56dXdId1dDRFArVThKNFRlOFFKdXdYTXpNb3BFZHczOENVSzV1UjJpeS9NWmdKdFNBL0grSGF1WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75fbfc3c-a24a-46ed-9b06-6b74b22c9156", "record_id": "flaws_cloudtrail:0000084:75fbfc3c-a24a-46ed-9b06-6b74b22c9156", "row_index": 84, "timestamp": "2019-07-12T09:57:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1066, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75fbfc3c-a24a-46ed-9b06-6b74b22c9156", "eventTime": "2019-07-12T09:57:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJQRTJMTzd2QTVLZEJNY3k5U0FkY3l6VVE5S1orWlUyZTI4Zm9aaVFtbzNDYWE5MGhveENmWldyNVE5bFErMDNGRzRjSE0xK2xTME1ublBrakd2T1RXaVZsdHIrM2phSVYvMUw2OXY2TDBVaVZDT29XdFNOcUlETkw3Vjg2MjNLYWNpTTA2SU56dXdId1dDRFArVThKNFRlOFFKdXdYTXpNb3BFZHczOENVSzV1UjJpeS9NWmdKdFNBL0grSGF1WT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e387277-3eec-40cf-804b-239b068f3b8a", "record_id": "flaws_cloudtrail:0000085:e387277-3eec-40cf-804b-239b068f3b8a", "row_index": 85, "timestamp": "2019-07-12T09:57:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e387277-3eec-40cf-804b-239b068f3b8a", "eventTime": "2019-07-12T09:57:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5SCtOVjdxWHZpeHN3R0laOTQ1TjdVRTdWOHZsaGtBWnJlOWxNYk90VGFyTit1OE92OFFuMXVKUFgydE9Hem1BeDE4SkZMVm5Ucjg2SEllRGd3Mkltdmw2Q3UvVnlEVENLWXQwb1pVUDVyVnhuODhHMldwQjdLREoxRGRVTFBYTGpQRzJLUG1XTHpGaEdLSHFQaUpaVUtXZzczVG1zNlc3WmswZXlDVDJpc2tFMmtnTWdXSFBUOUFlVm5QekZ1WXFtaE5ETFg2Zk5yQm1KV2dwQXd3OG1rM1FrWCtmeFBFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e387277-3eec-40cf-804b-239b068f3b8a", "record_id": "flaws_cloudtrail:0000086:e387277-3eec-40cf-804b-239b068f3b8a", "row_index": 86, "timestamp": "2019-07-12T09:57:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1112, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e387277-3eec-40cf-804b-239b068f3b8a", "eventTime": "2019-07-12T09:57:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5SCtOVjdxWHZpeHN3R0laOTQ1TjdVRTdWOHZsaGtBWnJlOWxNYk90VGFyTit1OE92OFFuMXVKUFgydE9Hem1BeDE4SkZMVm5Ucjg2SEllRGd3Mkltdmw2Q3UvVnlEVENLWXQwb1pVUDVyVnhuODhHMldwQjdLREoxRGRVTFBYTGpQRzJLUG1XTHpGaEdLSHFQaUpaVUtXZzczVG1zNlc3WmswZXlDVDJpc2tFMmtnTWdXSFBUOUFlVm5QekZ1WXFtaE5ETFg2Zk5yQm1KV2dwQXd3OG1rM1FrWCtmeFBFPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a906a1fc-5b69-46ec-8ac7-ff76a14f58a9", "record_id": "flaws_cloudtrail:0000087:a906a1fc-5b69-46ec-8ac7-ff76a14f58a9", "row_index": 87, "timestamp": "2019-07-12T09:57:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a906a1fc-5b69-46ec-8ac7-ff76a14f58a9", "eventTime": "2019-07-12T09:57:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjRVlUVnh1QUFzSzVIY3FVUEorcDlZNGhvVERqM3luYlZIdkptazhrWHZMYW9SSTFlekR0b29UcnZ4cDJyZzc5SDV6MnVONGJFOUhRc0ptWXNzcXJLTFBLbVRBVkV1cysxYlRmNGcvNHZwQU5xQ2trV1FLdmdpMS9DaGVnL1lCcTdHazd5QmdtMklxNlgrTndHWUZWMm1wY1pteEc3VlRuZ01ieEpRQ2NGaGVPSHVoSGJSdjNUU1poWnQxaUtvSTVjS1piT2FVdE41Uk1COGpPcWw3MjFnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a906a1fc-5b69-46ec-8ac7-ff76a14f58a9", "record_id": "flaws_cloudtrail:0000088:a906a1fc-5b69-46ec-8ac7-ff76a14f58a9", "row_index": 88, "timestamp": "2019-07-12T09:57:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1100, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a906a1fc-5b69-46ec-8ac7-ff76a14f58a9", "eventTime": "2019-07-12T09:57:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJjRVlUVnh1QUFzSzVIY3FVUEorcDlZNGhvVERqM3luYlZIdkptazhrWHZMYW9SSTFlekR0b29UcnZ4cDJyZzc5SDV6MnVONGJFOUhRc0ptWXNzcXJLTFBLbVRBVkV1cysxYlRmNGcvNHZwQU5xQ2trV1FLdmdpMS9DaGVnL1lCcTdHazd5QmdtMklxNlgrTndHWUZWMm1wY1pteEc3VlRuZ01ieEpRQ2NGaGVPSHVoSGJSdjNUU1poWnQxaUtvSTVjS1piT2FVdE41Uk1COGpPcWw3MjFnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d078b50-76ac-4a43-b7fe-5babc83af262", "record_id": "flaws_cloudtrail:0000089:3d078b50-76ac-4a43-b7fe-5babc83af262", "row_index": 89, "timestamp": "2019-07-12T09:58:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d078b50-76ac-4a43-b7fe-5babc83af262", "eventTime": "2019-07-12T09:58:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzMEVxNkpaeWNBVTZxZlpNcVAxbnRESkQ2Y2Vnd1BUbUp1cWpvZEc5OTJlTGcxd0FQS1FxNUJta3FHakg5dDhzZ0FZWW1KVVRDZGJuc1NXM2RabzR4VXZ5Vkd4Tks3OVpwRVUwcURvcnlMZ054Zkd5T2g0MkxhS3k3N0V6ZStOdTBMUzB2NVVxcFN6bjhMMVRDREtuUzROdTVIQWFUZWlONHBiTzF2aWg4dW5JZDRSenpodGgxVXNBMmlpZTFsUFJIWVA1Z09rNUZIdUZxQlZYMnFFT1pKSGg5WFJXMmh3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d078b50-76ac-4a43-b7fe-5babc83af262", "record_id": "flaws_cloudtrail:0000090:3d078b50-76ac-4a43-b7fe-5babc83af262", "row_index": 90, "timestamp": "2019-07-12T09:58:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d078b50-76ac-4a43-b7fe-5babc83af262", "eventTime": "2019-07-12T09:58:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzMEVxNkpaeWNBVTZxZlpNcVAxbnRESkQ2Y2Vnd1BUbUp1cWpvZEc5OTJlTGcxd0FQS1FxNUJta3FHakg5dDhzZ0FZWW1KVVRDZGJuc1NXM2RabzR4VXZ5Vkd4Tks3OVpwRVUwcURvcnlMZ054Zkd5T2g0MkxhS3k3N0V6ZStOdTBMUzB2NVVxcFN6bjhMMVRDREtuUzROdTVIQWFUZWlONHBiTzF2aWg4dW5JZDRSenpodGgxVXNBMmlpZTFsUFJIWVA1Z09rNUZIdUZxQlZYMnFFT1pKSGg5WFJXMmh3PSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ce6ee5-bed0-44ac-b810-ee35cb622926", "record_id": "flaws_cloudtrail:0000091:47ce6ee5-bed0-44ac-b810-ee35cb622926", "row_index": 91, "timestamp": "2019-07-12T09:58:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ce6ee5-bed0-44ac-b810-ee35cb622926", "eventTime": "2019-07-12T09:58:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNOGhIcjlVOUNvdVFLOXlUc05VK2V5bDlWYmxSbmxHWVNNcTBtSlduVVZVWGt3QzVVNEpmNC9ReHVna1piOVlyQWlUU2VYbmh3aEdQaC9HditIMSsrNnp4MHRvVjFZcHo1RWVuY1JjekhBeXhoUWt2VFhsZHFNZy9mTDNXbm1XenI0UUVHUHRZR0VHd0Jhczl2Q3pDQzNoZVRIeWVIWVNsSEd5OHdGMmZ1QUNhVmtjTkdTVzJPb0JTSjFsQXVSU3VhOW9QcXgvNzV2U05BUmVUMzJ3SDlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ce6ee5-bed0-44ac-b810-ee35cb622926", "record_id": "flaws_cloudtrail:0000092:47ce6ee5-bed0-44ac-b810-ee35cb622926", "row_index": 92, "timestamp": "2019-07-12T09:58:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ce6ee5-bed0-44ac-b810-ee35cb622926", "eventTime": "2019-07-12T09:58:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJNOGhIcjlVOUNvdVFLOXlUc05VK2V5bDlWYmxSbmxHWVNNcTBtSlduVVZVWGt3QzVVNEpmNC9ReHVna1piOVlyQWlUU2VYbmh3aEdQaC9HditIMSsrNnp4MHRvVjFZcHo1RWVuY1JjekhBeXhoUWt2VFhsZHFNZy9mTDNXbm1XenI0UUVHUHRZR0VHd0Jhczl2Q3pDQzNoZVRIeWVIWVNsSEd5OHdGMmZ1QUNhVmtjTkdTVzJPb0JTSjFsQXVSU3VhOW9QcXgvNzV2U05BUmVUMzJ3SDlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88a8763b-7745-4fc4-9d0e-ff92395d3621", "record_id": "flaws_cloudtrail:0000093:88a8763b-7745-4fc4-9d0e-ff92395d3621", "row_index": 93, "timestamp": "2019-07-12T09:58:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88a8763b-7745-4fc4-9d0e-ff92395d3621", "eventTime": "2019-07-12T09:58:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHSWNkYUdsOUFEYXpXNHpGdjRwNTFFd0d5L1ZsODEwM0Q5dDFpUTdNYU51UEx1WGJDeXJRZlRLUlhkalE0b3owdFZ2WWF0WWNsanY5WUs3UXBvdGRHdU5Mek5xM3RQQitHUzIrWDdZaXMvRHZpazhVRVc1SytjT21pYmtZbzh5Y0VYNXlXSFlWUWRsdjJESW43bmZEaThhNDA2THlCOVpiSFdXM3RheGkwb0xRNC9acUx4bU5oZ1kra0ZkZkpZST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14724-4cee-432e-af54-9943d9e9977e", "record_id": "flaws_cloudtrail:0000094:14724-4cee-432e-af54-9943d9e9977e", "row_index": 94, "timestamp": "2019-07-12T09:58:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14724-4cee-432e-af54-9943d9e9977e", "eventTime": "2019-07-12T09:58:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrL0NmZVAxQmxlV2xoYWp3UFdLRmhodExidllZM3lWZ1o0Y2ZOYXFIRkhId0x6Q0liMWwveWQvRmZ4Z2hyMUY4K05OY0dLQzNLYnlvVThVOXdPbEM0RHFPZnlFcWxWUGNIajBZZ05LVjBFSkoxZnpJeXZHaDIrYUZWMFp1SnQyOEZGZlpYdys0S1ZreDB0dmkrTnVGYWFUczRQQVl6M29CcVkyOU5UdFNWdnAvVDI0R2xMQkdrUDFJdHJrMk1TZGRFTDNraE0xRkY5WkdnV0FtdzQvMVN3M3Z3dU9aM0lnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88a8763b-7745-4fc4-9d0e-ff92395d3621", "record_id": "flaws_cloudtrail:0000095:88a8763b-7745-4fc4-9d0e-ff92395d3621", "row_index": 95, "timestamp": "2019-07-12T09:58:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1070, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88a8763b-7745-4fc4-9d0e-ff92395d3621", "eventTime": "2019-07-12T09:58:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHSWNkYUdsOUFEYXpXNHpGdjRwNTFFd0d5L1ZsODEwM0Q5dDFpUTdNYU51UEx1WGJDeXJRZlRLUlhkalE0b3owdFZ2WWF0WWNsanY5WUs3UXBvdGRHdU5Mek5xM3RQQitHUzIrWDdZaXMvRHZpazhVRVc1SytjT21pYmtZbzh5Y0VYNXlXSFlWUWRsdjJESW43bmZEaThhNDA2THlCOVpiSFdXM3RheGkwb0xRNC9acUx4bU5oZ1kra0ZkZkpZST0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14724-4cee-432e-af54-9943d9e9977e", "record_id": "flaws_cloudtrail:0000096:14724-4cee-432e-af54-9943d9e9977e", "row_index": 96, "timestamp": "2019-07-12T09:58:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14724-4cee-432e-af54-9943d9e9977e", "eventTime": "2019-07-12T09:58:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIrL0NmZVAxQmxlV2xoYWp3UFdLRmhodExidllZM3lWZ1o0Y2ZOYXFIRkhId0x6Q0liMWwveWQvRmZ4Z2hyMUY4K05OY0dLQzNLYnlvVThVOXdPbEM0RHFPZnlFcWxWUGNIajBZZ05LVjBFSkoxZnpJeXZHaDIrYUZWMFp1SnQyOEZGZlpYdys0S1ZreDB0dmkrTnVGYWFUczRQQVl6M29CcVkyOU5UdFNWdnAvVDI0R2xMQkdrUDFJdHJrMk1TZGRFTDNraE0xRkY5WkdnV0FtdzQvMVN3M3Z3dU9aM0lnPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fbdf6e2-87c1-4752-bc6d-9982aa03a9eb", "record_id": "flaws_cloudtrail:0000097:3fbdf6e2-87c1-4752-bc6d-9982aa03a9eb", "row_index": 97, "timestamp": "2019-07-12T10:03:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fbdf6e2-87c1-4752-bc6d-9982aa03a9eb", "eventTime": "2019-07-12T10:03:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fbdf6e2-87c1-4752-bc6d-9982aa03a9eb", "record_id": "flaws_cloudtrail:0000098:3fbdf6e2-87c1-4752-bc6d-9982aa03a9eb", "row_index": 98, "timestamp": "2019-07-12T10:03:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fbdf6e2-87c1-4752-bc6d-9982aa03a9eb", "eventTime": "2019-07-12T10:03:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe9df011-e568-41ec-be47-04c1c20a85f1", "record_id": "flaws_cloudtrail:0000099:fe9df011-e568-41ec-be47-04c1c20a85f1", "row_index": 99, "timestamp": "2019-07-12T10:03:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe9df011-e568-41ec-be47-04c1c20a85f1", "eventTime": "2019-07-12T10:03:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGV1Rmb251V0l2Z20wbExzVkpUU0tMZ0JJa01ZQ2VCTGlMcEhzc3dna0NCOStRa1JhdzRVZm5UOHJ4WUxxaXp0cnI5cEVONEN0L1lGaFlLeDdIS3BHTjVSejdUSlFCYUFaRkdndW5WcXlLWENZbEpHbTBvRG1pbEhrazh5UThIemhNREc1czk0SXg1bWQ5bGF0ejA0VE9DeTNvL2J6R1BFRk83ZG1sOS8zSEg1SmRwYTRKZVNQZnVVaDZJbWExdldObVJJN0ZOTkxoYWNyZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe9df011-e568-41ec-be47-04c1c20a85f1", "record_id": "flaws_cloudtrail:0000100:fe9df011-e568-41ec-be47-04c1c20a85f1", "row_index": 100, "timestamp": "2019-07-12T10:03:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe9df011-e568-41ec-be47-04c1c20a85f1", "eventTime": "2019-07-12T10:03:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJGV1Rmb251V0l2Z20wbExzVkpUU0tMZ0JJa01ZQ2VCTGlMcEhzc3dna0NCOStRa1JhdzRVZm5UOHJ4WUxxaXp0cnI5cEVONEN0L1lGaFlLeDdIS3BHTjVSejdUSlFCYUFaRkdndW5WcXlLWENZbEpHbTBvRG1pbEhrazh5UThIemhNREc1czk0SXg1bWQ5bGF0ejA0VE9DeTNvL2J6R1BFRk83ZG1sOS8zSEg1SmRwYTRKZVNQZnVVaDZJbWExdldObVJJN0ZOTkxoYWNyZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16e17a5-2a68-476e-adcd-702e364cae4b", "record_id": "flaws_cloudtrail:0000101:a16e17a5-2a68-476e-adcd-702e364cae4b", "row_index": 101, "timestamp": "2019-07-12T10:03:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16e17a5-2a68-476e-adcd-702e364cae4b", "eventTime": "2019-07-12T10:03:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzYU1vSmUwV1RIVzd3Z0gvZDIrUGRER29HT3B5ODIwQ1J2VkdUNy9rY3V4S3htcUNXaTVOWDZSeER5OXNGQzlTN3o2ejQ3V1lLdXFPQmxDdndXUU9VNzNaUkI5d2FnWlhHWG9SdnR3VWpQZHIxL0FtWjdPYjhvRSttWC9HVVZSUEM1UEYyeFhPenVLNFIrRUV5V1NJU29kdW9Ha01XUUk5WjlOeUppbWdFK0VGNXh1NWVuaUdoM3RRdDlNMEo4N1lPUS9hVUcvNmlLRWpyZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a16e17a5-2a68-476e-adcd-702e364cae4b", "record_id": "flaws_cloudtrail:0000102:a16e17a5-2a68-476e-adcd-702e364cae4b", "row_index": 102, "timestamp": "2019-07-12T10:03:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a16e17a5-2a68-476e-adcd-702e364cae4b", "eventTime": "2019-07-12T10:03:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzYU1vSmUwV1RIVzd3Z0gvZDIrUGRER29HT3B5ODIwQ1J2VkdUNy9rY3V4S3htcUNXaTVOWDZSeER5OXNGQzlTN3o2ejQ3V1lLdXFPQmxDdndXUU9VNzNaUkI5d2FnWlhHWG9SdnR3VWpQZHIxL0FtWjdPYjhvRSttWC9HVVZSUEM1UEYyeFhPenVLNFIrRUV5V1NJU29kdW9Ha01XUUk5WjlOeUppbWdFK0VGNXh1NWVuaUdoM3RRdDlNMEo4N1lPUS9hVUcvNmlLRWpyZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97f68ca7-5003-47bd-8b02-3d14666a2e9", "record_id": "flaws_cloudtrail:0000103:97f68ca7-5003-47bd-8b02-3d14666a2e9", "row_index": 103, "timestamp": "2019-07-12T10:03:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97f68ca7-5003-47bd-8b02-3d14666a2e9", "eventTime": "2019-07-12T10:03:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHdjBMeXh2aTZic0Z6MGs2UDA3ZUpxOHFocndxRVUxYUQvS0F1SlJEZlRybVgyczladlNpdTY1by9rUFBSVG9JTjBuYkRXL3RlQ3R6VXlWL1VpV3ZvakNFYW9HR3YzUnpDZXl4SGttNEtNUzhvR2hTT0pCM0FScHV1U0xYVGR2dlZmS1hzeDR4UytPUmdtZlIwSWh2YnZuTldVT0xMVmIvaWU1M3d0ZlVVNVVycmxqRCtEZ0E0cXlvbldaTTBzTjQ4RHU4bVdTQXJQZGMzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97f68ca7-5003-47bd-8b02-3d14666a2e9", "record_id": "flaws_cloudtrail:0000104:97f68ca7-5003-47bd-8b02-3d14666a2e9", "row_index": 104, "timestamp": "2019-07-12T10:03:49Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97f68ca7-5003-47bd-8b02-3d14666a2e9", "eventTime": "2019-07-12T10:03:49Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHdjBMeXh2aTZic0Z6MGs2UDA3ZUpxOHFocndxRVUxYUQvS0F1SlJEZlRybVgyczladlNpdTY1by9rUFBSVG9JTjBuYkRXL3RlQ3R6VXlWL1VpV3ZvakNFYW9HR3YzUnpDZXl4SGttNEtNUzhvR2hTT0pCM0FScHV1U0xYVGR2dlZmS1hzeDR4UytPUmdtZlIwSWh2YnZuTldVT0xMVmIvaWU1M3d0ZlVVNVVycmxqRCtEZ0E0cXlvbldaTTBzTjQ4RHU4bVdTQXJQZGMzZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca344eb3-518f-4697-8ea9-e5ba5efbbef4", "record_id": "flaws_cloudtrail:0000105:ca344eb3-518f-4697-8ea9-e5ba5efbbef4", "row_index": 105, "timestamp": "2019-07-12T10:03:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca344eb3-518f-4697-8ea9-e5ba5efbbef4", "eventTime": "2019-07-12T10:03:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5OSt6SHJJZWtIelNQT04zbVlUcXR1anJpaGVXb1lsOXRxcFhUWXliSzllcUdtSHBFQzdIY3pFaGFwb1BEbGRMSk1kOEF0RE9qdjQySWdjSmtpODZVdEJjN2JkQ3BQOUgyUXVVK0gwcDd6dW94dHo2LzExanNrZkpjdldtaVdXYjJ0R09hcG5jVm5wUFl2N0xEcXY3SzJPYWtJSmNRYXBWQjI2UTI5K3ZsNjl5b2hwTWZ2cW5sZUhJUmJyN0ZvV3hzalM0UEFza0pRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca344eb3-518f-4697-8ea9-e5ba5efbbef4", "record_id": "flaws_cloudtrail:0000106:ca344eb3-518f-4697-8ea9-e5ba5efbbef4", "row_index": 106, "timestamp": "2019-07-12T10:03:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca344eb3-518f-4697-8ea9-e5ba5efbbef4", "eventTime": "2019-07-12T10:03:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5OSt6SHJJZWtIelNQT04zbVlUcXR1anJpaGVXb1lsOXRxcFhUWXliSzllcUdtSHBFQzdIY3pFaGFwb1BEbGRMSk1kOEF0RE9qdjQySWdjSmtpODZVdEJjN2JkQ3BQOUgyUXVVK0gwcDd6dW94dHo2LzExanNrZkpjdldtaVdXYjJ0R09hcG5jVm5wUFl2N0xEcXY3SzJPYWtJSmNRYXBWQjI2UTI5K3ZsNjl5b2hwTWZ2cW5sZUhJUmJyN0ZvV3hzalM0UEFza0pRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf10bbf7-48ea-4d26-ab1a-6550acff60fe", "record_id": "flaws_cloudtrail:0000107:cf10bbf7-48ea-4d26-ab1a-6550acff60fe", "row_index": 107, "timestamp": "2019-07-12T10:03:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf10bbf7-48ea-4d26-ab1a-6550acff60fe", "eventTime": "2019-07-12T10:03:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhKzE0K21sQlpSUkp0dTJwWUczMUJuSGlScDN4WDA2c3oyRzZVSnU5VXhWbGtxMGY1MDhleHRSWFlFZDJtMWlPYzBXMTJjNDRSRGdDUDl3TEVPOXRVcG05L21RUzRZdC9HT1N4Qi85YThObzcvNEMxUm8vaUZBNW1KTi8yVEkvaWRSRlcyVkFvakZoZ2dGQnhSQnUrUDZvbFJaUUlsTTQ2SkpEeFVzMFk0aFB4Ylk3YjQ1Vy80MDlzU0hYQzEweXd4NXNMU0lsY1FrYnpydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf10bbf7-48ea-4d26-ab1a-6550acff60fe", "record_id": "flaws_cloudtrail:0000108:cf10bbf7-48ea-4d26-ab1a-6550acff60fe", "row_index": 108, "timestamp": "2019-07-12T10:03:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf10bbf7-48ea-4d26-ab1a-6550acff60fe", "eventTime": "2019-07-12T10:03:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJhKzE0K21sQlpSUkp0dTJwWUczMUJuSGlScDN4WDA2c3oyRzZVSnU5VXhWbGtxMGY1MDhleHRSWFlFZDJtMWlPYzBXMTJjNDRSRGdDUDl3TEVPOXRVcG05L21RUzRZdC9HT1N4Qi85YThObzcvNEMxUm8vaUZBNW1KTi8yVEkvaWRSRlcyVkFvakZoZ2dGQnhSQnUrUDZvbFJaUUlsTTQ2SkpEeFVzMFk0aFB4Ylk3YjQ1Vy80MDlzU0hYQzEweXd4NXNMU0lsY1FrYnpydz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae9cb1af-391d-4cf2-9658-f7f35df44f37", "record_id": "flaws_cloudtrail:0000109:ae9cb1af-391d-4cf2-9658-f7f35df44f37", "row_index": 109, "timestamp": "2019-07-12T10:03:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae9cb1af-391d-4cf2-9658-f7f35df44f37", "eventTime": "2019-07-12T10:03:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4dllGalNGWlBrRUwrMDU3SGdjaFRDM0ljWkozdjY1TG9zQmxZVEJvVVAxbG1Na2V4S29LMS9ucEV4aDBXTjBJbUlKaHgxc3VlZGZHbEJvdkltbElZcmZmUk5nRzJTNWFta0JUekNidmdQNEVIK1h2emViU1AydHB1SjBZc0lvbHJHVjYxK1ZrQ0VKMEZBOUFGbXhvQ3MzbHgxSm43QXFOVkNVT2s3dHRCbXFpSTVmc1hVeWJNOWNFWEhWd1lyWjZqYUpuZ3c1R0YwNkNHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae9cb1af-391d-4cf2-9658-f7f35df44f37", "record_id": "flaws_cloudtrail:0000110:ae9cb1af-391d-4cf2-9658-f7f35df44f37", "row_index": 110, "timestamp": "2019-07-12T10:03:54Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae9cb1af-391d-4cf2-9658-f7f35df44f37", "eventTime": "2019-07-12T10:03:54Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ4dllGalNGWlBrRUwrMDU3SGdjaFRDM0ljWkozdjY1TG9zQmxZVEJvVVAxbG1Na2V4S29LMS9ucEV4aDBXTjBJbUlKaHgxc3VlZGZHbEJvdkltbElZcmZmUk5nRzJTNWFta0JUekNidmdQNEVIK1h2emViU1AydHB1SjBZc0lvbHJHVjYxK1ZrQ0VKMEZBOUFGbXhvQ3MzbHgxSm43QXFOVkNVT2s3dHRCbXFpSTVmc1hVeWJNOWNFWEhWd1lyWjZqYUpuZ3c1R0YwNkNHQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "395ff574-8ab0-44a7-9111-2a213fb941b6", "record_id": "flaws_cloudtrail:0000111:395ff574-8ab0-44a7-9111-2a213fb941b6", "row_index": 111, "timestamp": "2019-07-12T10:03:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "395ff574-8ab0-44a7-9111-2a213fb941b6", "eventTime": "2019-07-12T10:03:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkNGhtbkxWYWczUlQ1alV3MW04WUtlbDJYeWZHa0o3NHhvNnR4R1BtNTJwR0pCTlFUditaT3UyR1RVdkhadDQyU01ORjREdDU0YmU0YjM4UlFnSm5aUWRMMTJqSnFmNUc0VWtxZkR3ZEtDeE15b3pDbXNPM0xUK09OU0had0tqblZ5L2JqRk1VNERaNDZ6N0dBc1Ezdi9zeDF5WnJNd0RDSXVzTGZSQVFDYVcxN2hjSU1PaGtQWCsvRy9heGthN3JwUG02ZXY0OGJvdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "395ff574-8ab0-44a7-9111-2a213fb941b6", "record_id": "flaws_cloudtrail:0000112:395ff574-8ab0-44a7-9111-2a213fb941b6", "row_index": 112, "timestamp": "2019-07-12T10:03:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "395ff574-8ab0-44a7-9111-2a213fb941b6", "eventTime": "2019-07-12T10:03:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJkNGhtbkxWYWczUlQ1alV3MW04WUtlbDJYeWZHa0o3NHhvNnR4R1BtNTJwR0pCTlFUditaT3UyR1RVdkhadDQyU01ORjREdDU0YmU0YjM4UlFnSm5aUWRMMTJqSnFmNUc0VWtxZkR3ZEtDeE15b3pDbXNPM0xUK09OU0had0tqblZ5L2JqRk1VNERaNDZ6N0dBc1Ezdi9zeDF5WnJNd0RDSXVzTGZSQVFDYVcxN2hjSU1PaGtQWCsvRy9heGthN3JwUG02ZXY0OGJvdz0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91c0f916-7b0d-403b-9fa0-2363b8f0df15", "record_id": "flaws_cloudtrail:0000113:91c0f916-7b0d-403b-9fa0-2363b8f0df15", "row_index": 113, "timestamp": "2019-07-12T10:03:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91c0f916-7b0d-403b-9fa0-2363b8f0df15", "eventTime": "2019-07-12T10:03:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuU0NSSXhjRjBsVlkyaTMvcFZmZHhGb2VLOTJwZ29TSTVyaXZmZUpoUWNqc0dTckk0d29JcHdjb2RCOS9wYXNXeDhQdHJDTHh6UjViSVlHOERGYm1jNWcybWtPdmIxQS9zSndyWUcwNVVLVEJpRHNmclphMGxTWGpBeGhrcXdtKzgzODlBY04rNXUxOFBSZTFIRHh3UG1XdFRYZXJmVS81UzFHMURVanlVdkttWEhmQ2RRMWczdVFsUzFMeFBqRlJMMUNCdDhFRjQ3eVdFdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91c0f916-7b0d-403b-9fa0-2363b8f0df15", "record_id": "flaws_cloudtrail:0000114:91c0f916-7b0d-403b-9fa0-2363b8f0df15", "row_index": 114, "timestamp": "2019-07-12T10:03:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91c0f916-7b0d-403b-9fa0-2363b8f0df15", "eventTime": "2019-07-12T10:03:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJuU0NSSXhjRjBsVlkyaTMvcFZmZHhGb2VLOTJwZ29TSTVyaXZmZUpoUWNqc0dTckk0d29JcHdjb2RCOS9wYXNXeDhQdHJDTHh6UjViSVlHOERGYm1jNWcybWtPdmIxQS9zSndyWUcwNVVLVEJpRHNmclphMGxTWGpBeGhrcXdtKzgzODlBY04rNXUxOFBSZTFIRHh3UG1XdFRYZXJmVS81UzFHMURVanlVdkttWEhmQ2RRMWczdVFsUzFMeFBqRlJMMUNCdDhFRjQ3eVdFdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f5ee8ad-fe61-4b47-b5e2-6e6bf11af6bd", "record_id": "flaws_cloudtrail:0000115:6f5ee8ad-fe61-4b47-b5e2-6e6bf11af6bd", "row_index": 115, "timestamp": "2019-07-12T10:03:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f5ee8ad-fe61-4b47-b5e2-6e6bf11af6bd", "eventTime": "2019-07-12T10:03:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzTGZxL1dmZXpIZkpXZ3Z6TE1qYlYxSm5CZzA0T3htYWs4WC9DNnRDek9CSnRKSFhHeS9JUy9oTE13S1FPVDZ5alM2aHRVTGIwYXFUVVgveUs4dys5T09Ea1FBT0dHS0VTaWNHOHB2WjIyem41MHJZTGFrU2szTE1pcW9hbFBpM1ozaUladU9FUmpwalB0ZDB3NDl0aWl0YnRKbFZDb1dheVVlcjFoVXRnckszTWUwU0NSM2ttWE91ZmRHdkUrQkJYVHRYRkxqakRBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f5ee8ad-fe61-4b47-b5e2-6e6bf11af6bd", "record_id": "flaws_cloudtrail:0000116:6f5ee8ad-fe61-4b47-b5e2-6e6bf11af6bd", "row_index": 116, "timestamp": "2019-07-12T10:03:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1085, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f5ee8ad-fe61-4b47-b5e2-6e6bf11af6bd", "eventTime": "2019-07-12T10:03:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzTGZxL1dmZXpIZkpXZ3Z6TE1qYlYxSm5CZzA0T3htYWs4WC9DNnRDek9CSnRKSFhHeS9JUy9oTE13S1FPVDZ5alM2aHRVTGIwYXFUVVgveUs4dys5T09Ea1FBT0dHS0VTaWNHOHB2WjIyem41MHJZTGFrU2szTE1pcW9hbFBpM1ozaUladU9FUmpwalB0ZDB3NDl0aWl0YnRKbFZDb1dheVVlcjFoVXRnckszTWUwU0NSM2ttWE91ZmRHdkUrQkJYVHRYRkxqakRBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b9f270-1f39-4d22-840e-c69e621ac6c6", "record_id": "flaws_cloudtrail:0000117:a2b9f270-1f39-4d22-840e-c69e621ac6c6", "row_index": 117, "timestamp": "2019-07-12T10:04:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b9f270-1f39-4d22-840e-c69e621ac6c6", "eventTime": "2019-07-12T10:04:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJya0h4TThqK2tjNHFndXNjNk5sYXBKZzFySEN3RWFYUHA4cnJuU21EcHhGZ2F1Q0kyNzNPcWlIOWNxZ0pNTUErcnlIa29WM2xSb2lwdExkWDZ0SlRwTElROTFlK1N6WEgxeDAxcHVnVFl5ODlva3pIdFM2c1l0RU1uWEJuUXd5UlliaFZnQjhTTzlnWXJrSHBBWlN5Uy94bGxxa25uN2R1MWkxSHlWSXluajY5TFJITXc1MXJFRGRDOVJlOXl3K0VCVEU2bXNCcS9mZ3l6dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2b9f270-1f39-4d22-840e-c69e621ac6c6", "record_id": "flaws_cloudtrail:0000118:a2b9f270-1f39-4d22-840e-c69e621ac6c6", "row_index": 118, "timestamp": "2019-07-12T10:04:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1093, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2b9f270-1f39-4d22-840e-c69e621ac6c6", "eventTime": "2019-07-12T10:04:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJya0h4TThqK2tjNHFndXNjNk5sYXBKZzFySEN3RWFYUHA4cnJuU21EcHhGZ2F1Q0kyNzNPcWlIOWNxZ0pNTUErcnlIa29WM2xSb2lwdExkWDZ0SlRwTElROTFlK1N6WEgxeDAxcHVnVFl5ODlva3pIdFM2c1l0RU1uWEJuUXd5UlliaFZnQjhTTzlnWXJrSHBBWlN5Uy94bGxxa25uN2R1MWkxSHlWSXluajY5TFJITXc1MXJFRGRDOVJlOXl3K0VCVEU2bXNCcS9mZ3l6dz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66d063771-bad3-4446-8611-c888903c4337", "record_id": "flaws_cloudtrail:0000119:66d063771-bad3-4446-8611-c888903c4337", "row_index": 119, "timestamp": "2019-07-12T10:04:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66d063771-bad3-4446-8611-c888903c4337", "eventTime": "2019-07-12T10:04:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzV3EvMmtSa0RwU080SEFNREorQXJGa05LREFLVDJRSG5Fb1JRY1pjYzdiOWh0aGpseVZnUlNlVWRaemdGQjVWSzVDMTg1R3dMb2JLNVVuSmVmcHUwUURUeVpjT2JXanFrd0JndGtVbmVMWmFBeVkxV1BxYVpSZnlJYmN2clhOTE51bndqTWVQY1U4a2tSUThsUkdJODhockU0VEdqeVMwQ1BLWUVka1NHUkVvY1ptTlpZckxySXlRZXBsTEJDR3R1QVcwNXBOcWFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66d063771-bad3-4446-8611-c888903c4337", "record_id": "flaws_cloudtrail:0000120:66d063771-bad3-4446-8611-c888903c4337", "row_index": 120, "timestamp": "2019-07-12T10:04:02Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1086, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66d063771-bad3-4446-8611-c888903c4337", "eventTime": "2019-07-12T10:04:02Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIzV3EvMmtSa0RwU080SEFNREorQXJGa05LREFLVDJRSG5Fb1JRY1pjYzdiOWh0aGpseVZnUlNlVWRaemdGQjVWSzVDMTg1R3dMb2JLNVVuSmVmcHUwUURUeVpjT2JXanFrd0JndGtVbmVMWmFBeVkxV1BxYVpSZnlJYmN2clhOTE51bndqTWVQY1U4a2tSUThsUkdJODhockU0VEdqeVMwQ1BLWUVka1NHUkVvY1ptTlpZckxySXlRZXBsTEJDR3R1QVcwNXBOcWFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccc9586c-df58-40d2-976f-9f6a1fd05915", "record_id": "flaws_cloudtrail:0000121:ccc9586c-df58-40d2-976f-9f6a1fd05915", "row_index": 121, "timestamp": "2019-07-12T10:04:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccc9586c-df58-40d2-976f-9f6a1fd05915", "eventTime": "2019-07-12T10:04:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDSlY3MG9mQVdpTmVBaGx0d1J0aWRDMG85cTRQMkRJN2hLNUkzVGg1VFJBUHBSZkZDM1dYTzFwdTdGWmliaGM1bEVtdGI1VTc0OHRxVHFyV2VNSkthZWh1TzZZSWYwejNlaGhRU2pzVkRjZUx6cWw0NHpXMDNFakUxOWttakRGSXJOc0xvN2s2OG12VE9YZnpuQmZaQjVMSTB2MlZ2b0pta0xGUmw2YmEwUGFBQldsblhZVWYvQThlWDRSRVhBL1ZaZGoxOHgyL2JBWWpPUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccc9586c-df58-40d2-976f-9f6a1fd05915", "record_id": "flaws_cloudtrail:0000122:ccc9586c-df58-40d2-976f-9f6a1fd05915", "row_index": 122, "timestamp": "2019-07-12T10:04:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1092, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccc9586c-df58-40d2-976f-9f6a1fd05915", "eventTime": "2019-07-12T10:04:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDSlY3MG9mQVdpTmVBaGx0d1J0aWRDMG85cTRQMkRJN2hLNUkzVGg1VFJBUHBSZkZDM1dYTzFwdTdGWmliaGM1bEVtdGI1VTc0OHRxVHFyV2VNSkthZWh1TzZZSWYwejNlaGhRU2pzVkRjZUx6cWw0NHpXMDNFakUxOWttakRGSXJOc0xvN2s2OG12VE9YZnpuQmZaQjVMSTB2MlZ2b0pta0xGUmw2YmEwUGFBQldsblhZVWYvQThlWDRSRVhBL1ZaZGoxOHgyL2JBWWpPUT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c43bf240-5902-4194-ac91-eb1ce49379", "record_id": "flaws_cloudtrail:0000123:c43bf240-5902-4194-ac91-eb1ce49379", "row_index": 123, "timestamp": "2019-07-12T10:04:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c43bf240-5902-4194-ac91-eb1ce49379", "eventTime": "2019-07-12T10:04:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCRk96SU9RYzBjdHg4WGlMdVlxV3JGY2dQTmFjd3A5RVpEWnRjZHFkOFp5WEtIR3ZIQ1ZkblptcFpHVGZqaXc1UlVpNjlWNk52bjlRM0NVdjIvSFFJWjNaRklQb0Q4eG5Gd2N0cFFYdjQrUUZwZGo0L2ludHZKeHg2bFB0aFN4Vm9pM1RhS1B5VVExMC8rSE5pejIxekFxcWV6Qk9GeEUycnF5UkFoNDhmZzQxZlBZaE0xMXNET0FCMFNrZC9ZdlVZUFc0MytuNU1CWExGQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c43bf240-5902-4194-ac91-eb1ce49379", "record_id": "flaws_cloudtrail:0000124:c43bf240-5902-4194-ac91-eb1ce49379", "row_index": 124, "timestamp": "2019-07-12T10:04:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1091, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c43bf240-5902-4194-ac91-eb1ce49379", "eventTime": "2019-07-12T10:04:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJCRk96SU9RYzBjdHg4WGlMdVlxV3JGY2dQTmFjd3A5RVpEWnRjZHFkOFp5WEtIR3ZIQ1ZkblptcFpHVGZqaXc1UlVpNjlWNk52bjlRM0NVdjIvSFFJWjNaRklQb0Q4eG5Gd2N0cFFYdjQrUUZwZGo0L2ludHZKeHg2bFB0aFN4Vm9pM1RhS1B5VVExMC8rSE5pejIxekFxcWV6Qk9GeEUycnF5UkFoNDhmZzQxZlBZaE0xMXNET0FCMFNrZC9ZdlVZUFc0MytuNU1CWExGQT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25df3915-262b-46c1-99a6-7545a2545cdb", "record_id": "flaws_cloudtrail:0000125:25df3915-262b-46c1-99a6-7545a2545cdb", "row_index": 125, "timestamp": "2019-07-12T10:04:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25df3915-262b-46c1-99a6-7545a2545cdb", "eventTime": "2019-07-12T10:04:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYYzRmajB6ajNOdE1jZDNUY3BCcGI5MTZ4OFE4UEd4Vi9mRWlrTHFYQkpSRWVYSmpobi9hNXc5TXNUck9yQ1h1ZTNMZFRlSDFtY2tsQXMyT01idUMvREJ6ZCtpVUcwYlp2OEVBeU9FcHQrV2FBRVBkNVdNd2VPV0NydFptajVZelVJZUxQUk9ueVlDeUxKV2UwcEZkR3ByRlZXQllPaXVYZTZVQUF3K0J1cFJkcGRrN25oRGlVa29PMUR2SVkyR2ROMGNHT01kWG53RE8rbXVBSE9WMTRXOG51VTI5WGNrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25df3915-262b-46c1-99a6-7545a2545cdb", "record_id": "flaws_cloudtrail:0000126:25df3915-262b-46c1-99a6-7545a2545cdb", "row_index": 126, "timestamp": "2019-07-12T10:04:06Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25df3915-262b-46c1-99a6-7545a2545cdb", "eventTime": "2019-07-12T10:04:06Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJYYzRmajB6ajNOdE1jZDNUY3BCcGI5MTZ4OFE4UEd4Vi9mRWlrTHFYQkpSRWVYSmpobi9hNXc5TXNUck9yQ1h1ZTNMZFRlSDFtY2tsQXMyT01idUMvREJ6ZCtpVUcwYlp2OEVBeU9FcHQrV2FBRVBkNVdNd2VPV0NydFptajVZelVJZUxQUk9ueVlDeUxKV2UwcEZkR3ByRlZXQllPaXVYZTZVQUF3K0J1cFJkcGRrN25oRGlVa29PMUR2SVkyR2ROMGNHT01kWG53RE8rbXVBSE9WMTRXOG51VTI5WGNrPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681a6f06-41b0-4b0b-8feb-d04a69d84582", "record_id": "flaws_cloudtrail:0000127:681a6f06-41b0-4b0b-8feb-d04a69d84582", "row_index": 127, "timestamp": "2019-07-12T10:04:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681a6f06-41b0-4b0b-8feb-d04a69d84582", "eventTime": "2019-07-12T10:04:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsMU55cGhqR1hNcEgveXNZczV5S1h5cjVvL3hYaEpwY2g3STZQNE9FRWZFUE9xL3lFcnNHZlI1ZThnN0hvNXBOUTBST0dWckxyYWJlUDJOaVNnNEo3empDTHB5dTdwZWlydmE3ODZDNjRNUm9TV2c5YkxDMzlVMUhKazJRaUJxM3NZR3cxRHZjWXY5REhwMUdTNHozNUs4dkNPVnZZNytxc1Eyb2V1TDlxSnVuVWtFWnc5dmNBOWpELy9RUFFqWGpYcVA0ZjZHYitSUWUvWHJhSTl4V2l3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "681a6f06-41b0-4b0b-8feb-d04a69d84582", "record_id": "flaws_cloudtrail:0000128:681a6f06-41b0-4b0b-8feb-d04a69d84582", "row_index": 128, "timestamp": "2019-07-12T10:04:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "681a6f06-41b0-4b0b-8feb-d04a69d84582", "eventTime": "2019-07-12T10:04:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsMU55cGhqR1hNcEgveXNZczV5S1h5cjVvL3hYaEpwY2g3STZQNE9FRWZFUE9xL3lFcnNHZlI1ZThnN0hvNXBOUTBST0dWckxyYWJlUDJOaVNnNEo3empDTHB5dTdwZWlydmE3ODZDNjRNUm9TV2c5YkxDMzlVMUhKazJRaUJxM3NZR3cxRHZjWXY5REhwMUdTNHozNUs4dkNPVnZZNytxc1Eyb2V1TDlxSnVuVWtFWnc5dmNBOWpELy9RUFFqWGpYcVA0ZjZHYitSUWUvWHJhSTl4V2l3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02065-2580-4831-a373-3bf909656e9a", "record_id": "flaws_cloudtrail:0000129:02065-2580-4831-a373-3bf909656e9a", "row_index": 129, "timestamp": "2019-07-12T10:04:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02065-2580-4831-a373-3bf909656e9a", "eventTime": "2019-07-12T10:04:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzdXdHUzN4bnQzMDd0Nms5N083R1FPU2FZd0hyZWY1dmNzcXZ4UFlWYSszTi9UdjcxUU51ZnFhNVltWExOSzRCK25yUzhBOVBLZzVqb0dzSTFwSE1tenVWU1BoNnFrOHlEWndtaGYzRFdZTEljUVJ3YXdmaHV2ZDEvYzJkUGh3SU10OTVpWEZldzZxbzhobmVabnAveFRqVUxDUEsyWFJkUHQvMFVreXp0Qk83ZjE0eHpLMFNNcjJkMkU3cEhMMFZ6QTBoQnhSdU9tTElpT2k3WEhwUVZhdHJ2SkY2V1RNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02065-2580-4831-a373-3bf909656e9a", "record_id": "flaws_cloudtrail:0000130:02065-2580-4831-a373-3bf909656e9a", "row_index": 130, "timestamp": "2019-07-12T10:04:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02065-2580-4831-a373-3bf909656e9a", "eventTime": "2019-07-12T10:04:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJzdXdHUzN4bnQzMDd0Nms5N083R1FPU2FZd0hyZWY1dmNzcXZ4UFlWYSszTi9UdjcxUU51ZnFhNVltWExOSzRCK25yUzhBOVBLZzVqb0dzSTFwSE1tenVWU1BoNnFrOHlEWndtaGYzRFdZTEljUVJ3YXdmaHV2ZDEvYzJkUGh3SU10OTVpWEZldzZxbzhobmVabnAveFRqVUxDUEsyWFJkUHQvMFVreXp0Qk83ZjE0eHpLMFNNcjJkMkU3cEhMMFZ6QTBoQnhSdU9tTElpT2k3WEhwUVZhdHJ2SkY2V1RNPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82e80a3-3947-4bd6-8342-dc268943d67e3", "record_id": "flaws_cloudtrail:0000131:b82e80a3-3947-4bd6-8342-dc268943d67e3", "row_index": 131, "timestamp": "2019-07-12T10:04:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82e80a3-3947-4bd6-8342-dc268943d67e3", "eventTime": "2019-07-12T10:04:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxVXJRQk1qRGRmd0JLT0NFTEdhNzZDS00rTS9mTStBUWR6dXAxZEtNZEw2T3M1d3U0NU1YNlhpTlRybi9SVEJOU0NoL3M0SG9IdE1IMHNkcDNVRzNyZGxjekU0c0hHSVc4L2lQTWN4cnAzZjdOV0dTNDJzMTJIZWJSYjVnQmFnZnhjcXJ4VGpiQVgrWmZqUHFwSWFiQjR2UWJUNUFoZVRCRWtQNjg1ay9pdmlIMTVhdkdwZ05WdFh1ZGJ2SEg3TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82e80a3-3947-4bd6-8342-dc268943d67e3", "record_id": "flaws_cloudtrail:0000132:b82e80a3-3947-4bd6-8342-dc268943d67e3", "row_index": 132, "timestamp": "2019-07-12T10:04:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82e80a3-3947-4bd6-8342-dc268943d67e3", "eventTime": "2019-07-12T10:04:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxVXJRQk1qRGRmd0JLT0NFTEdhNzZDS00rTS9mTStBUWR6dXAxZEtNZEw2T3M1d3U0NU1YNlhpTlRybi9SVEJOU0NoL3M0SG9IdE1IMHNkcDNVRzNyZGxjekU0c0hHSVc4L2lQTWN4cnAzZjdOV0dTNDJzMTJIZWJSYjVnQmFnZnhjcXJ4VGpiQVgrWmZqUHFwSWFiQjR2UWJUNUFoZVRCRWtQNjg1ay9pdmlIMTVhdkdwZ05WdFh1ZGJ2SEg3TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8b270443-7e2b-4498-b551-acb71ab42c0c", "record_id": "flaws_cloudtrail:0000133:c8b270443-7e2b-4498-b551-acb71ab42c0c", "row_index": 133, "timestamp": "2019-07-12T10:04:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8b270443-7e2b-4498-b551-acb71ab42c0c", "eventTime": "2019-07-12T10:04:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZbHRGY3d4OW50ZFRna1JPUElrekdoM0p2V2RuUFNaNE1nVmNFK2d1ajR5eVVpcTFrVjFMdm1EZGxSbTVjVEpwZGluZmFheTNLeFA2bzF4YUp4NG5nS2g2N0RXMm5qQmp6V3RoeWpadWYwYXJNb2ZZWWIxdTk4VUlmK2drQ1lJZFA1TElYNUdkUWNLNjJQNEM5ZEdjQVplSENpQjNENzRJeFV0M05KMDdLTThHa3BwQXlrME9zNjUwL2x3UlkrQUtHMzZCMHV4b2loTzdWQTVhdzlUMS9jNzVwczN3RWRBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8b270443-7e2b-4498-b551-acb71ab42c0c", "record_id": "flaws_cloudtrail:0000134:c8b270443-7e2b-4498-b551-acb71ab42c0c", "row_index": 134, "timestamp": "2019-07-12T10:04:10Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8b270443-7e2b-4498-b551-acb71ab42c0c", "eventTime": "2019-07-12T10:04:10Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJZbHRGY3d4OW50ZFRna1JPUElrekdoM0p2V2RuUFNaNE1nVmNFK2d1ajR5eVVpcTFrVjFMdm1EZGxSbTVjVEpwZGluZmFheTNLeFA2bzF4YUp4NG5nS2g2N0RXMm5qQmp6V3RoeWpadWYwYXJNb2ZZWWIxdTk4VUlmK2drQ1lJZFA1TElYNUdkUWNLNjJQNEM5ZEdjQVplSENpQjNENzRJeFV0M05KMDdLTThHa3BwQXlrME9zNjUwL2x3UlkrQUtHMzZCMHV4b2loTzdWQTVhdzlUMS9jNzVwczN3RWRBPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ea1d8e-7394-41f1-b956-0315af8f6b35", "record_id": "flaws_cloudtrail:0000135:47ea1d8e-7394-41f1-b956-0315af8f6b35", "row_index": 135, "timestamp": "2019-07-12T10:04:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ea1d8e-7394-41f1-b956-0315af8f6b35", "eventTime": "2019-07-12T10:04:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsYTduOEJxT2lNVjZJOHRvN1M1VlZqMS82UCsrRjRCSjJBcW1JY0VYRDVPZHkwaTNTQ1h2NnlXWWlYR3d5OUhyVzRiWjBoQ0VvUDB3dFZieUNiQzVMYWdOVmc1TFZLclNZUzRjMzBEajhwTEdseVVtL0QrN0gvTnQvN0IrV01CNG83OU5vb2Rqd3pZZWJiSk8zSjY0T2svUS9wbll2bWF6KzloMHJQYjY0TVVHVGsyTGUvMkhtS1VTL2c0RGM4YnM5dUZpMVVyWFNDaytWYzQ4WTEwWm1BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ea1d8e-7394-41f1-b956-0315af8f6b35", "record_id": "flaws_cloudtrail:0000136:47ea1d8e-7394-41f1-b956-0315af8f6b35", "row_index": 136, "timestamp": "2019-07-12T10:04:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ea1d8e-7394-41f1-b956-0315af8f6b35", "eventTime": "2019-07-12T10:04:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJsYTduOEJxT2lNVjZJOHRvN1M1VlZqMS82UCsrRjRCSjJBcW1JY0VYRDVPZHkwaTNTQ1h2NnlXWWlYR3d5OUhyVzRiWjBoQ0VvUDB3dFZieUNiQzVMYWdOVmc1TFZLclNZUzRjMzBEajhwTEdseVVtL0QrN0gvTnQvN0IrV01CNG83OU5vb2Rqd3pZZWJiSk8zSjY0T2svUS9wbll2bWF6KzloMHJQYjY0TVVHVGsyTGUvMkhtS1VTL2c0RGM4YnM5dUZpMVVyWFNDaytWYzQ4WTEwWm1BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0424fd0-9e70-4917-8f2a-843f197a5850", "record_id": "flaws_cloudtrail:0000137:a0424fd0-9e70-4917-8f2a-843f197a5850", "row_index": 137, "timestamp": "2019-07-12T10:04:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0424fd0-9e70-4917-8f2a-843f197a5850", "eventTime": "2019-07-12T10:04:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TWtwbm5tVm1pSW1IbDRJNm9ad3ZpbkY3SmF1SWgrSVBGNlVBQWU2amFyY3N2aW5hcVhDUmppY3FtTHhYUWZEVE95SVN0ZnFWNjVoSnkzMnpveTh4T0JQdzRMYWR4RitFRGJodS9nZUpBUDczdFZvWVJ3MVltMkxWa1Z5cDFIM3VkYXk3ck5Td2hhcU1IREdGaG5iUnlQcmRwUVdqR05wS24zcFVYWTByOFRKNGJPS1o1ZkhEYmFxV1p5eEQvY1AxMnJSZWtyRmYzWG5adkZIZFpMODR4K09oaGpOL2JZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0424fd0-9e70-4917-8f2a-843f197a5850", "record_id": "flaws_cloudtrail:0000138:a0424fd0-9e70-4917-8f2a-843f197a5850", "row_index": 138, "timestamp": "2019-07-12T10:04:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0424fd0-9e70-4917-8f2a-843f197a5850", "eventTime": "2019-07-12T10:04:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ0TWtwbm5tVm1pSW1IbDRJNm9ad3ZpbkY3SmF1SWgrSVBGNlVBQWU2amFyY3N2aW5hcVhDUmppY3FtTHhYUWZEVE95SVN0ZnFWNjVoSnkzMnpveTh4T0JQdzRMYWR4RitFRGJodS9nZUpBUDczdFZvWVJ3MVltMkxWa1Z5cDFIM3VkYXk3ck5Td2hhcU1IREdGaG5iUnlQcmRwUVdqR05wS24zcFVYWTByOFRKNGJPS1o1ZkhEYmFxV1p5eEQvY1AxMnJSZWtyRmYzWG5adkZIZFpMODR4K09oaGpOL2JZPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53a500860-2e42-455d-b9c2-934cc1d4b448", "record_id": "flaws_cloudtrail:0000139:53a500860-2e42-455d-b9c2-934cc1d4b448", "row_index": 139, "timestamp": "2019-07-12T10:04:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53a500860-2e42-455d-b9c2-934cc1d4b448", "eventTime": "2019-07-12T10:04:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6Q0NzaWZ0OUhPOUphaEpseXFodFFNMmNZZUZPSnNZOUlMNGFqRWpueDJtb0RzYkYydVZvL1NVMXpPN0FjK2FNOHNpQXErWDI3TmJQcmEwbDBibVhMaFlYbG4yWjJYS0ZpemxMNE5VM2t5dDhSaUZmbXpsb1d6NkYybHJpcGRjdHMvZmdXWGxkMGlOek8vZzg2cDhGYzJXbXdvblF0dmpBLys3TXQ2V0hHZjFsZ3hzUWQyUHZHN3dMdW1BMkU5OUlEaUI5S3ZWQXlNbkxpNWJVZUI1dDZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53a500860-2e42-455d-b9c2-934cc1d4b448", "record_id": "flaws_cloudtrail:0000140:53a500860-2e42-455d-b9c2-934cc1d4b448", "row_index": 140, "timestamp": "2019-07-12T10:04:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1101, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53a500860-2e42-455d-b9c2-934cc1d4b448", "eventTime": "2019-07-12T10:04:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ6Q0NzaWZ0OUhPOUphaEpseXFodFFNMmNZZUZPSnNZOUlMNGFqRWpueDJtb0RzYkYydVZvL1NVMXpPN0FjK2FNOHNpQXErWDI3TmJQcmEwbDBibVhMaFlYbG4yWjJYS0ZpemxMNE5VM2t5dDhSaUZmbXpsb1d6NkYybHJpcGRjdHMvZmdXWGxkMGlOek8vZzg2cDhGYzJXbXdvblF0dmpBLys3TXQ2V0hHZjFsZ3hzUWQyUHZHN3dMdW1BMkU5OUlEaUI5S3ZWQXlNbkxpNWJVZUI1dDZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdaca6c5-efee-437b-84e3-311c7b6de6f1", "record_id": "flaws_cloudtrail:0000141:fdaca6c5-efee-437b-84e3-311c7b6de6f1", "row_index": 141, "timestamp": "2019-07-12T10:04:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdaca6c5-efee-437b-84e3-311c7b6de6f1", "eventTime": "2019-07-12T10:04:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVc3d5VEV2eS84em5LRjNJaVZXOWNUWWpJYTB2QU83MWxLT3A5N0NnUjVob0p3ejNTRU5LaFg5S3FwMjdyR0hiSG9OYmJWQTNiRHoyckFxa3FIdTE3aFhja295K2hqMlJXU3l5SE1mbGdlZUlRSjd2T2hXNG1JVk5URklVd1VUaTJOb2trZ1VEUlNaV3dmRUR3Y3gySEErcjhPYUZCc1lKejdWNDQ4VTB5ZXhBZzVNUDIraHJUSFJkcXB2L1M1SFJvTzVjblQwTzdDMkdNeEFMMk05bHEwcmRnM1NaMHFVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdaca6c5-efee-437b-84e3-311c7b6de6f1", "record_id": "flaws_cloudtrail:0000142:fdaca6c5-efee-437b-84e3-311c7b6de6f1", "row_index": 142, "timestamp": "2019-07-12T10:04:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1113, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdaca6c5-efee-437b-84e3-311c7b6de6f1", "eventTime": "2019-07-12T10:04:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJVc3d5VEV2eS84em5LRjNJaVZXOWNUWWpJYTB2QU83MWxLT3A5N0NnUjVob0p3ejNTRU5LaFg5S3FwMjdyR0hiSG9OYmJWQTNiRHoyckFxa3FIdTE3aFhja295K2hqMlJXU3l5SE1mbGdlZUlRSjd2T2hXNG1JVk5URklVd1VUaTJOb2trZ1VEUlNaV3dmRUR3Y3gySEErcjhPYUZCc1lKejdWNDQ4VTB5ZXhBZzVNUDIraHJUSFJkcXB2L1M1SFJvTzVjblQwTzdDMkdNeEFMMk05bHEwcmRnM1NaMHFVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "130868c0a-99d3-4155-9877-bcc746afc003", "record_id": "flaws_cloudtrail:0000143:130868c0a-99d3-4155-9877-bcc746afc003", "row_index": 143, "timestamp": "2019-07-12T10:04:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "130868c0a-99d3-4155-9877-bcc746afc003", "eventTime": "2019-07-12T10:04:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5MnpEaEF1MjJ3UXRkVTFWZ1lKTTltdVZYSEVzdmtUQjlkS1NpeTZ1eFBVTktrYzQyRDNFNmdSRGFvU3BQTGxYalVkYVdXV0FjcFB5T1pWQVc0bEErRXp3dnNuRUJiNFppbmhUR3ovODR1eU9CeFFLakR5WGJoakwrZTdWczJEWU1OY2NNbm4vT2pCOWFmM050K01zV1BJTEFrbGJVUGZUbFlMclhWZkFTb2ljbFFPcW00emJyeThvcFRLamx5TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "130868c0a-99d3-4155-9877-bcc746afc003", "record_id": "flaws_cloudtrail:0000144:130868c0a-99d3-4155-9877-bcc746afc003", "row_index": 144, "timestamp": "2019-07-12T10:04:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1071, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "130868c0a-99d3-4155-9877-bcc746afc003", "eventTime": "2019-07-12T10:04:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI5MnpEaEF1MjJ3UXRkVTFWZ1lKTTltdVZYSEVzdmtUQjlkS1NpeTZ1eFBVTktrYzQyRDNFNmdSRGFvU3BQTGxYalVkYVdXV0FjcFB5T1pWQVc0bEErRXp3dnNuRUJiNFppbmhUR3ovODR1eU9CeFFLakR5WGJoakwrZTdWczJEWU1OY2NNbm4vT2pCOWFmM050K01zV1BJTEFrbGJVUGZUbFlMclhWZkFTb2ljbFFPcW00emJyeThvcFRLamx5TT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2440c0f-e320-4b18-84a0-bfdf278f1700", "record_id": "flaws_cloudtrail:0000145:e2440c0f-e320-4b18-84a0-bfdf278f1700", "row_index": 145, "timestamp": "2019-07-12T10:05:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2440c0f-e320-4b18-84a0-bfdf278f1700", "eventTime": "2019-07-12T10:05:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2440c0f-e320-4b18-84a0-bfdf278f1700", "record_id": "flaws_cloudtrail:0000146:e2440c0f-e320-4b18-84a0-bfdf278f1700", "row_index": 146, "timestamp": "2019-07-12T10:05:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2440c0f-e320-4b18-84a0-bfdf278f1700", "eventTime": "2019-07-12T10:05:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1338bac4-e99b-4a94-a7ec-4229ac1d8b7b", "record_id": "flaws_cloudtrail:0000147:1338bac4-e99b-4a94-a7ec-4229ac1d8b7b", "row_index": 147, "timestamp": "2019-07-12T10:06:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA343J7Q6KPKBRHPOG", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1159, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1338bac4-e99b-4a94-a7ec-4229ac1d8b7b", "eventTime": "2019-07-12T10:06:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA343J7Q6KPKBRHPOG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T09:29:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1338bac4-e99b-4a94-a7ec-4229ac1d8b7b", "record_id": "flaws_cloudtrail:0000148:1338bac4-e99b-4a94-a7ec-4229ac1d8b7b", "row_index": 148, "timestamp": "2019-07-12T10:06:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA343J7Q6KPKBRHPOG", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1159, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1338bac4-e99b-4a94-a7ec-4229ac1d8b7b", "eventTime": "2019-07-12T10:06:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA343J7Q6KPKBRHPOG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T09:29:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95aedcd7-310a-4bf8-a729-42d2c863f5cc", "record_id": "flaws_cloudtrail:0000149:95aedcd7-310a-4bf8-a729-42d2c863f5cc", "row_index": 149, "timestamp": "2019-07-12T10:13:58Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA36K31NGCDEA3AG1L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.171.29.90", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 494, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95aedcd7-310a-4bf8-a729-42d2c863f5cc", "eventTime": "2019-07-12T10:13:58Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.171.29.90", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA36K31NGCDEA3AG1L", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c0cbf1f-1c30-449e-98af-fac1af51ac93", "record_id": "flaws_cloudtrail:0000150:6c0cbf1f-1c30-449e-98af-fac1af51ac93", "row_index": 150, "timestamp": "2019-07-12T10:14:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA36K31NGCDEA3AG1L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.171.29.90", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 498, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c0cbf1f-1c30-449e-98af-fac1af51ac93", "eventTime": "2019-07-12T10:14:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.171.29.90", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA36K31NGCDEA3AG1L", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "475614d09-c07e-4935-9159-7dc26d4d6220", "record_id": "flaws_cloudtrail:0000151:475614d09-c07e-4935-9159-7dc26d4d6220", "row_index": 151, "timestamp": "2019-07-12T10:15:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.158.214.251", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "475614d09-c07e-4935-9159-7dc26d4d6220", "eventTime": "2019-07-12T10:15:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.158.214.251", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "475614d09-c07e-4935-9159-7dc26d4d6220", "record_id": "flaws_cloudtrail:0000152:475614d09-c07e-4935-9159-7dc26d4d6220", "row_index": 152, "timestamp": "2019-07-12T10:15:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "9.158.214.251", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "475614d09-c07e-4935-9159-7dc26d4d6220", "eventTime": "2019-07-12T10:15:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.158.214.251", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3911d95-f0f7-4a47-904c-b8e0dc67b808", "record_id": "flaws_cloudtrail:0000153:a3911d95-f0f7-4a47-904c-b8e0dc67b808", "row_index": 153, "timestamp": "2019-07-12T10:15:37Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3911d95-f0f7-4a47-904c-b8e0dc67b808", "eventTime": "2019-07-12T10:15:37Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3911d95-f0f7-4a47-904c-b8e0dc67b808", "record_id": "flaws_cloudtrail:0000154:a3911d95-f0f7-4a47-904c-b8e0dc67b808", "row_index": 154, "timestamp": "2019-07-12T10:15:37Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3911d95-f0f7-4a47-904c-b8e0dc67b808", "eventTime": "2019-07-12T10:15:37Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c22f642e-9920-42b0-a18c-2c0f13f5a5b5", "record_id": "flaws_cloudtrail:0000155:c22f642e-9920-42b0-a18c-2c0f13f5a5b5", "row_index": 155, "timestamp": "2019-07-12T10:15:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c22f642e-9920-42b0-a18c-2c0f13f5a5b5", "eventTime": "2019-07-12T10:15:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c22f642e-9920-42b0-a18c-2c0f13f5a5b5", "record_id": "flaws_cloudtrail:0000156:c22f642e-9920-42b0-a18c-2c0f13f5a5b5", "row_index": 156, "timestamp": "2019-07-12T10:15:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c22f642e-9920-42b0-a18c-2c0f13f5a5b5", "eventTime": "2019-07-12T10:15:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5400c0-3594-4fee-b137-428dfddb86cb", "record_id": "flaws_cloudtrail:0000157:9d5400c0-3594-4fee-b137-428dfddb86cb", "row_index": 157, "timestamp": "2019-07-12T10:16:00Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA343J7Q6KPKBRHPOG", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5400c0-3594-4fee-b137-428dfddb86cb", "eventTime": "2019-07-12T10:16:00Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA343J7Q6KPKBRHPOG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T09:29:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d5400c0-3594-4fee-b137-428dfddb86cb", "record_id": "flaws_cloudtrail:0000158:9d5400c0-3594-4fee-b137-428dfddb86cb", "row_index": 158, "timestamp": "2019-07-12T10:16:00Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA343J7Q6KPKBRHPOG", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1160, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d5400c0-3594-4fee-b137-428dfddb86cb", "eventTime": "2019-07-12T10:16:00Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a is not authorized to perform: iam:GetUser on resource: user i-aa2d3b42e5c6e801a", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA343J7Q6KPKBRHPOG", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T09:29:16Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4d525d6-8ee6-4460-86c8-5e244972ddb1b", "record_id": "flaws_cloudtrail:0000159:d4d525d6-8ee6-4460-86c8-5e244972ddb1b", "row_index": 159, "timestamp": "2019-07-12T10:16:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4d525d6-8ee6-4460-86c8-5e244972ddb1b", "eventTime": "2019-07-12T10:16:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4d525d6-8ee6-4460-86c8-5e244972ddb1b", "record_id": "flaws_cloudtrail:0000160:d4d525d6-8ee6-4460-86c8-5e244972ddb1b", "row_index": 160, "timestamp": "2019-07-12T10:16:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4d525d6-8ee6-4460-86c8-5e244972ddb1b", "eventTime": "2019-07-12T10:16:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali5-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e6abc73-d4c6-4812-b702-63f659978b5", "record_id": "flaws_cloudtrail:0000161:8e6abc73-d4c6-4812-b702-63f659978b5", "row_index": 161, "timestamp": "2019-07-12T10:17:21Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e6abc73-d4c6-4812-b702-63f659978b5", "eventTime": "2019-07-12T10:17:21Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e6abc73-d4c6-4812-b702-63f659978b5", "record_id": "flaws_cloudtrail:0000162:8e6abc73-d4c6-4812-b702-63f659978b5", "row_index": 162, "timestamp": "2019-07-12T10:17:21Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e6abc73-d4c6-4812-b702-63f659978b5", "eventTime": "2019-07-12T10:17:21Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d5c07b4-89af-4f98-89ef-dbf7560ba050", "record_id": "flaws_cloudtrail:0000163:3d5c07b4-89af-4f98-89ef-dbf7560ba050", "row_index": 163, "timestamp": "2019-07-12T10:17:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d5c07b4-89af-4f98-89ef-dbf7560ba050", "eventTime": "2019-07-12T10:17:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d5c07b4-89af-4f98-89ef-dbf7560ba050", "record_id": "flaws_cloudtrail:0000164:3d5c07b4-89af-4f98-89ef-dbf7560ba050", "row_index": 164, "timestamp": "2019-07-12T10:17:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d5c07b4-89af-4f98-89ef-dbf7560ba050", "eventTime": "2019-07-12T10:17:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "682f0463-1fd9-49f1-a082-5070a02508e", "record_id": "flaws_cloudtrail:0000165:682f0463-1fd9-49f1-a082-5070a02508e", "row_index": 165, "timestamp": "2019-07-12T10:17:57Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "682f0463-1fd9-49f1-a082-5070a02508e", "eventTime": "2019-07-12T10:17:57Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "682f0463-1fd9-49f1-a082-5070a02508e", "record_id": "flaws_cloudtrail:0000166:682f0463-1fd9-49f1-a082-5070a02508e", "row_index": 166, "timestamp": "2019-07-12T10:17:57Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "682f0463-1fd9-49f1-a082-5070a02508e", "eventTime": "2019-07-12T10:17:57Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4414ce78-bf12-482a-a1f8-54a2e50ad320", "record_id": "flaws_cloudtrail:0000167:4414ce78-bf12-482a-a1f8-54a2e50ad320", "row_index": 167, "timestamp": "2019-07-12T10:18:36Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA36K31NGCDEA3AG1L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.171.29.90", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3508"], "raw_record_size_bytes": 623, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4414ce78-bf12-482a-a1f8-54a2e50ad320", "eventTime": "2019-07-12T10:18:36Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.171.29.90", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA36K31NGCDEA3AG1L", "userName": "backup"}, "requestParameters": {"name": "trail-3508"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3508"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb16610e-853e-46e9-9f39-750385c664f4", "record_id": "flaws_cloudtrail:0000168:eb16610e-853e-46e9-9f39-750385c664f4", "row_index": 168, "timestamp": "2019-07-12T10:18:50Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb16610e-853e-46e9-9f39-750385c664f4", "eventTime": "2019-07-12T10:18:50Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb16610e-853e-46e9-9f39-750385c664f4", "record_id": "flaws_cloudtrail:0000169:eb16610e-853e-46e9-9f39-750385c664f4", "row_index": 169, "timestamp": "2019-07-12T10:18:50Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 670, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb16610e-853e-46e9-9f39-750385c664f4", "eventTime": "2019-07-12T10:18:50Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d09ef13-8f12-412f-8cfb-4f28795dcaa2", "record_id": "flaws_cloudtrail:0000170:5d09ef13-8f12-412f-8cfb-4f28795dcaa2", "row_index": 170, "timestamp": "2019-07-12T10:19:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d09ef13-8f12-412f-8cfb-4f28795dcaa2", "eventTime": "2019-07-12T10:19:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d09ef13-8f12-412f-8cfb-4f28795dcaa2", "record_id": "flaws_cloudtrail:0000171:5d09ef13-8f12-412f-8cfb-4f28795dcaa2", "row_index": 171, "timestamp": "2019-07-12T10:19:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d09ef13-8f12-412f-8cfb-4f28795dcaa2", "eventTime": "2019-07-12T10:19:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5e88a5-b458-4f51-a76c-b622d99adc03", "record_id": "flaws_cloudtrail:0000172:eb5e88a5-b458-4f51-a76c-b622d99adc03", "row_index": 172, "timestamp": "2019-07-12T10:19:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5e88a5-b458-4f51-a76c-b622d99adc03", "eventTime": "2019-07-12T10:19:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4dDdFdGtuUllReWZGTFlPbG1KSjhrOVVGSkJJOGo5Sll0c2FLMFFENVdKYWQyd1J2bEJoUk9zSEs2ajBUMSszNERVZmc3WWFuRk9xbEk4aFRrZVN1NldKbU9JWVF1UTFpUlIwRU1UV2dxckx3QlN6czBLeFlNb2UwbFRVRzNFS1Y4TjVPNFk3czFaTHhrT0lTczhzRW1nTVhraE1RL3QrTnRwNnE5dy8weXd4UjBXZmpQM29Nd1UvSXNDeG8rSFEwd0IrOS81R0NvRExNZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb5e88a5-b458-4f51-a76c-b622d99adc03", "record_id": "flaws_cloudtrail:0000173:eb5e88a5-b458-4f51-a76c-b622d99adc03", "row_index": 173, "timestamp": "2019-07-12T10:19:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb5e88a5-b458-4f51-a76c-b622d99adc03", "eventTime": "2019-07-12T10:19:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI4dDdFdGtuUllReWZGTFlPbG1KSjhrOVVGSkJJOGo5Sll0c2FLMFFENVdKYWQyd1J2bEJoUk9zSEs2ajBUMSszNERVZmc3WWFuRk9xbEk4aFRrZVN1NldKbU9JWVF1UTFpUlIwRU1UV2dxckx3QlN6czBLeFlNb2UwbFRVRzNFS1Y4TjVPNFk3czFaTHhrT0lTczhzRW1nTVhraE1RL3QrTnRwNnE5dy8weXd4UjBXZmpQM29Nd1UvSXNDeG8rSFEwd0IrOS81R0NvRExNZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07e198db-13f8-40cd-a809-438fcacc3ec4", "record_id": "flaws_cloudtrail:0000174:07e198db-13f8-40cd-a809-438fcacc3ec4", "row_index": 174, "timestamp": "2019-07-12T10:19:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07e198db-13f8-40cd-a809-438fcacc3ec4", "eventTime": "2019-07-12T10:19:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEeXZKWjB0NURaZXVNamNlcW9EdWcvS3NQd1ZhUmFRMTcvSDFVNUhRZDdQczFpT1AyTngzZHVvZ0IzbE5CRzNwV2ExS25rT1YxUUIwSGFZalVQVUtvK09rV1dBUVU3aEhYdElwSGtXOEN6QnJkMzFMK2lwTkdueXlFWTZhNGp0TGZuTmoxVnFrYnlDeGtrVVlYeDFoTndrazZEWjBuWHlNTkRsMm5jRkJtdExQYkJYNlpKR05UTE5CUlNXU0RUMHd2K2UwazczYk5uTFJPZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07e198db-13f8-40cd-a809-438fcacc3ec4", "record_id": "flaws_cloudtrail:0000175:07e198db-13f8-40cd-a809-438fcacc3ec4", "row_index": 175, "timestamp": "2019-07-12T10:19:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07e198db-13f8-40cd-a809-438fcacc3ec4", "eventTime": "2019-07-12T10:19:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJEeXZKWjB0NURaZXVNamNlcW9EdWcvS3NQd1ZhUmFRMTcvSDFVNUhRZDdQczFpT1AyTngzZHVvZ0IzbE5CRzNwV2ExS25rT1YxUUIwSGFZalVQVUtvK09rV1dBUVU3aEhYdElwSGtXOEN6QnJkMzFMK2lwTkdueXlFWTZhNGp0TGZuTmoxVnFrYnlDeGtrVVlYeDFoTndrazZEWjBuWHlNTkRsMm5jRkJtdExQYkJYNlpKR05UTE5CUlNXU0RUMHd2K2UwazczYk5uTFJPZz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc93635e-37f0-4fc3-b42e-6ace7aa6e965", "record_id": "flaws_cloudtrail:0000176:fc93635e-37f0-4fc3-b42e-6ace7aa6e965", "row_index": 176, "timestamp": "2019-07-12T10:19:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc93635e-37f0-4fc3-b42e-6ace7aa6e965", "eventTime": "2019-07-12T10:19:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5L21zc09JL1VDQWpzZ2RyZVlRb2FxOGpYRVNCTFRXSjR0NWh6SDVlK29LNEhpR1ZmYnhGa1NtcnBUL2M2Nk1IRmZaNWlVYnhMQjJQWHdtZHFENjh1d2ZjZG8zRWR5NVJidDZndit3Y2ZMTkR0OWlUMStPdStWdmJQV2lLeElPVlZBTlRrcXhkWFJ3QzF1elY4UG84U3dhUElqK0VBajlKZWxnMW5SNGhnZVgrNDdrZzZWSnNYdmljTDdrelJCMlVPTkVndUxiMm53V3lDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc93635e-37f0-4fc3-b42e-6ace7aa6e965", "record_id": "flaws_cloudtrail:0000177:fc93635e-37f0-4fc3-b42e-6ace7aa6e965", "row_index": 177, "timestamp": "2019-07-12T10:19:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1089, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc93635e-37f0-4fc3-b42e-6ace7aa6e965", "eventTime": "2019-07-12T10:19:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ5L21zc09JL1VDQWpzZ2RyZVlRb2FxOGpYRVNCTFRXSjR0NWh6SDVlK29LNEhpR1ZmYnhGa1NtcnBUL2M2Nk1IRmZaNWlVYnhMQjJQWHdtZHFENjh1d2ZjZG8zRWR5NVJidDZndit3Y2ZMTkR0OWlUMStPdStWdmJQV2lLeElPVlZBTlRrcXhkWFJ3QzF1elY4UG84U3dhUElqK0VBajlKZWxnMW5SNGhnZVgrNDdrZzZWSnNYdmljTDdrelJCMlVPTkVndUxiMm53V3lDdz09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff5a24e6-8947-4126-adb0-b7beca4d84c6", "record_id": "flaws_cloudtrail:0000178:ff5a24e6-8947-4126-adb0-b7beca4d84c6", "row_index": 178, "timestamp": "2019-07-12T10:19:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff5a24e6-8947-4126-adb0-b7beca4d84c6", "eventTime": "2019-07-12T10:19:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDOGFSMnVVTGpMSHcwZktoWjkxM1JnUmhUeFQzLzRtZDNBSW9hTzRGMFN4VnF4L0IwNGhGQVJXYk45dUtFamxxQzNDd0JJelBWWHQzT0wzYVlOS2lIcG9YakkrcW5xdHVQSFBndXhabVl4TkhTQzk0MGNWZCtwTlVxbkNRN1pzNTBIT1lhbitYOVlWZTdZZ2x4SEV5d2ZQZmhaTDY1K1JwOElnRDVvcUl5Sy8rYmNiWitkUVA5MGlXbDhlZ1Zmd2MydW9vNWx3VTV6M0k2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff5a24e6-8947-4126-adb0-b7beca4d84c6", "record_id": "flaws_cloudtrail:0000179:ff5a24e6-8947-4126-adb0-b7beca4d84c6", "row_index": 179, "timestamp": "2019-07-12T10:19:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1090, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff5a24e6-8947-4126-adb0-b7beca4d84c6", "eventTime": "2019-07-12T10:19:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDOGFSMnVVTGpMSHcwZktoWjkxM1JnUmhUeFQzLzRtZDNBSW9hTzRGMFN4VnF4L0IwNGhGQVJXYk45dUtFamxxQzNDd0JJelBWWHQzT0wzYVlOS2lIcG9YakkrcW5xdHVQSFBndXhabVl4TkhTQzk0MGNWZCtwTlVxbkNRN1pzNTBIT1lhbitYOVlWZTdZZ2x4SEV5d2ZQZmhaTDY1K1JwOElnRDVvcUl5Sy8rYmNiWitkUVA5MGlXbDhlZ1Zmd2MydW9vNWx3VTV6M0k2QT09IiwicyI6IjEifQ==", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78d47a30-ee93-4b5d-9196-366cab7ff827", "record_id": "flaws_cloudtrail:0000180:78d47a30-ee93-4b5d-9196-366cab7ff827", "row_index": 180, "timestamp": "2019-07-12T10:19:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78d47a30-ee93-4b5d-9196-366cab7ff827", "eventTime": "2019-07-12T10:19:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3Yk56THF1eFdKTm5mUWlhYS9abEhjVDEzRkVkbWpQSnVjZm85NEhPUG5USVdDMHMrQld0d2l6elU4MFJsNzFra05uU3VILzBlc0ZTRU9uelNvSXlvNHliK01pYUV3dEQ1U0wxOE4wbi8wckQrOHY3RlFRVGFsenM2Ni9zSEloSUZmMG15UUdId0tYUVdwOVRtM0ROdG1pemc4NlpYODVtend3SkN4VXRFRTRlYW1FNWY5UlpoaTRPQWFhRW00NmdjNnJvZ2RKeXZYaU1SVE1nTGhkYWtFaDlPTm9BMkdRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78d47a30-ee93-4b5d-9196-366cab7ff827", "record_id": "flaws_cloudtrail:0000181:78d47a30-ee93-4b5d-9196-366cab7ff827", "row_index": 181, "timestamp": "2019-07-12T10:19:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78d47a30-ee93-4b5d-9196-366cab7ff827", "eventTime": "2019-07-12T10:19:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiI3Yk56THF1eFdKTm5mUWlhYS9abEhjVDEzRkVkbWpQSnVjZm85NEhPUG5USVdDMHMrQld0d2l6elU4MFJsNzFra05uU3VILzBlc0ZTRU9uelNvSXlvNHliK01pYUV3dEQ1U0wxOE4wbi8wckQrOHY3RlFRVGFsenM2Ni9zSEloSUZmMG15UUdId0tYUVdwOVRtM0ROdG1pemc4NlpYODVtend3SkN4VXRFRTRlYW1FNWY5UlpoaTRPQWFhRW00NmdjNnJvZ2RKeXZYaU1SVE1nTGhkYWtFaDlPTm9BMkdRPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ebf57e1-ff75-489f-a9c6-a754f5182e0d", "record_id": "flaws_cloudtrail:0000182:9ebf57e1-ff75-489f-a9c6-a754f5182e0d", "row_index": 182, "timestamp": "2019-07-12T10:19:20Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ebf57e1-ff75-489f-a9c6-a754f5182e0d", "eventTime": "2019-07-12T10:19:20Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71b79da5-4aec-48c2-8f68-a62a8b22d02f", "record_id": "flaws_cloudtrail:0000183:71b79da5-4aec-48c2-8f68-a62a8b22d02f", "row_index": 183, "timestamp": "2019-07-12T10:19:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71b79da5-4aec-48c2-8f68-a62a8b22d02f", "eventTime": "2019-07-12T10:19:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvTjZCRDdjQ0trNjBSSW5OZXVQRjJVdmNmWWtlbzVSd0h0eU14cmhzOHJ5eG5yaWtJMjF0Umx5YzUzeDNyRWdUaHFqVzRkLzZ3cU5wOVMrdDViSzFWNitUOTJLdjV6TDVuQ1hULzVBcDdzV2E5TzAwdGQ5L0RxYUZnR3pwbmMyTDhHdWpTTDkwR1F5ZUNTQlJ1RDEwc09LZXZOYXRhdTlrSVRtVk04Mm9WVDFzREpJNlo1VHNMY0hOb1o1cmRMdUhCbi9tYzRpU0dQZFR0QU4vRmlHZWlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ebf57e1-ff75-489f-a9c6-a754f5182e0d", "record_id": "flaws_cloudtrail:0000184:9ebf57e1-ff75-489f-a9c6-a754f5182e0d", "row_index": 184, "timestamp": "2019-07-12T10:19:20Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ebf57e1-ff75-489f-a9c6-a754f5182e0d", "eventTime": "2019-07-12T10:19:20Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71b79da5-4aec-48c2-8f68-a62a8b22d02f", "record_id": "flaws_cloudtrail:0000185:71b79da5-4aec-48c2-8f68-a62a8b22d02f", "row_index": 185, "timestamp": "2019-07-12T10:19:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71b79da5-4aec-48c2-8f68-a62a8b22d02f", "eventTime": "2019-07-12T10:19:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJvTjZCRDdjQ0trNjBSSW5OZXVQRjJVdmNmWWtlbzVSd0h0eU14cmhzOHJ5eG5yaWtJMjF0Umx5YzUzeDNyRWdUaHFqVzRkLzZ3cU5wOVMrdDViSzFWNitUOTJLdjV6TDVuQ1hULzVBcDdzV2E5TzAwdGQ5L0RxYUZnR3pwbmMyTDhHdWpTTDkwR1F5ZUNTQlJ1RDEwc09LZXZOYXRhdTlrSVRtVk04Mm9WVDFzREpJNlo1VHNMY0hOb1o1cmRMdUhCbi9tYzRpU0dQZFR0QU4vRmlHZWlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9026f4-e318-4c06-a4c9-48f09746f07e", "record_id": "flaws_cloudtrail:0000186:2b9026f4-e318-4c06-a4c9-48f09746f07e", "row_index": 186, "timestamp": "2019-07-12T10:19:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9026f4-e318-4c06-a4c9-48f09746f07e", "eventTime": "2019-07-12T10:19:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFcUR0WjdMQ3lIT08wd3pOb2wzTE5adUxCaW01ZnVxZGJBTUhiMlFDYTVWZUwwdGdRRTZLZkZsWnVxcS8rYm45Q1BiS1NUQkdHbWhQbXViUkc2STJWalJ6aUg0SVl3NjQ3SmJaOWJPM0toWjlWRGpSNDVWa3BkRWppTk1zajlwalVvd2paV1cyVkdjRkgrTDlDNThMR3R6YmQ3TGU5aTFNWGU5a0dBQ1VDNVh5TEVUeFA3TWR0b2lJQ250WVQ4VGlQaUV2RUVDaWxaRDdjWTMva2d1TGZJQkNHUFpkN3IwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9026f4-e318-4c06-a4c9-48f09746f07e", "record_id": "flaws_cloudtrail:0000187:2b9026f4-e318-4c06-a4c9-48f09746f07e", "row_index": 187, "timestamp": "2019-07-12T10:19:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1111, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9026f4-e318-4c06-a4c9-48f09746f07e", "eventTime": "2019-07-12T10:19:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJFcUR0WjdMQ3lIT08wd3pOb2wzTE5adUxCaW01ZnVxZGJBTUhiMlFDYTVWZUwwdGdRRTZLZkZsWnVxcS8rYm45Q1BiS1NUQkdHbWhQbXViUkc2STJWalJ6aUg0SVl3NjQ3SmJaOWJPM0toWjlWRGpSNDVWa3BkRWppTk1zajlwalVvd2paV1cyVkdjRkgrTDlDNThMR3R6YmQ3TGU5aTFNWGU5a0dBQ1VDNVh5TEVUeFA3TWR0b2lJQ250WVQ4VGlQaUV2RUVDaWxaRDdjWTMva2d1TGZJQkNHUFpkN3IwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c9d88e7-e8b5-4189-af33-344b1061aa42", "record_id": "flaws_cloudtrail:0000188:2c9d88e7-e8b5-4189-af33-344b1061aa42", "row_index": 188, "timestamp": "2019-07-12T10:19:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c9d88e7-e8b5-4189-af33-344b1061aa42", "eventTime": "2019-07-12T10:19:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDb3FmN284cTlLZXlUeWswRFcwVFhVbUNqN2E1dzA1TGR0K1ZHbEpqN2NleXJzQWtQY1ZUR1Yzb1RaZzgyTDNlemNqdHFKV3pTODcxeDhmM1dnVFpxTDJ0Z0UrdHFPNHFhREM1YUloekdMR0JTTWs1OUhtWGFoV2UwVDFkZE91SXdnWndMa2FsZ2JwZ1JYQ21FemduK0J2b1k1UXpFbElCcmJZVHlqcVQxWUV2anFuOGNGRnM4blFrbC9UMk5pL1hWUHcyVXpyV1ovdnVkZC8ybzEzNGRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c9d88e7-e8b5-4189-af33-344b1061aa42", "record_id": "flaws_cloudtrail:0000189:2c9d88e7-e8b5-4189-af33-344b1061aa42", "row_index": 189, "timestamp": "2019-07-12T10:19:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c9d88e7-e8b5-4189-af33-344b1061aa42", "eventTime": "2019-07-12T10:19:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJDb3FmN284cTlLZXlUeWswRFcwVFhVbUNqN2E1dzA1TGR0K1ZHbEpqN2NleXJzQWtQY1ZUR1Yzb1RaZzgyTDNlemNqdHFKV3pTODcxeDhmM1dnVFpxTDJ0Z0UrdHFPNHFhREM1YUloekdMR0JTTWs1OUhtWGFoV2UwVDFkZE91SXdnWndMa2FsZ2JwZ1JYQ21FemduK0J2b1k1UXpFbElCcmJZVHlqcVQxWUV2anFuOGNGRnM4blFrbC9UMk5pL1hWUHcyVXpyV1ovdnVkZC8ybzEzNGRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aae25fc6-0665-49b5-94f5-8a9d381374ab", "record_id": "flaws_cloudtrail:0000190:aae25fc6-0665-49b5-94f5-8a9d381374ab", "row_index": 190, "timestamp": "2019-07-12T10:19:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aae25fc6-0665-49b5-94f5-8a9d381374ab", "eventTime": "2019-07-12T10:19:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1aTczRzMrUTFLNUZHRjdJZUVPUDIxUXhRQ0p4U0tCOTkvZStZelltRU54UVVFZks3aGRWbmlCRXVmMFFTQ1pZaGlhamxKeEZpQUJ1ZUFuQkRaOEJSUEIvVmRseHFRa1FoMzhYaXRBbjVkMExQRTlWd01DS1JBa3Y3ZUdlanhkekJLRVlRT2VpOVF4RXovRS9aMEtVelJGVG1CTjJHYk4wWGdYM28wOXFKMWJIamg2dSsxVnlyWkpvM1pNbWcxSDZlelp0M1Zic2xKc2tYaUdKaGNta0E5SDZWT2oxcjEwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae612b0f-b570-4382-81fd-5df8f753c63c", "record_id": "flaws_cloudtrail:0000191:ae612b0f-b570-4382-81fd-5df8f753c63c", "row_index": 191, "timestamp": "2019-07-12T10:19:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae612b0f-b570-4382-81fd-5df8f753c63c", "eventTime": "2019-07-12T10:19:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOWnF2NzJGb0lESmV6a0l1a0NzR0ZjSlZIazZWTjRGNzNaNEdvTkFtd3p5K1FrakxsRkt2TkRhNEpqOFFnbEhMQ2ZjOURWeFVENE01d3pIRWs5VEFFekJDeHR6cUY1ZFlWYitrcW1FS1NMSGR6QlQwbDRkaFJ0N1c4TDYrNW9PcmtnZ2IrSkxMVlpNYUlIaTVNSHFhRmgwV1pBd3R5UUtiT1FIUDdDK2lZZlg3dHlQYmhsUmRsc3liZHhGN1RXVmhaQkF1NnIwRHhqS1hJdkVPNzdLWEVnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aae25fc6-0665-49b5-94f5-8a9d381374ab", "record_id": "flaws_cloudtrail:0000192:aae25fc6-0665-49b5-94f5-8a9d381374ab", "row_index": 192, "timestamp": "2019-07-12T10:19:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aae25fc6-0665-49b5-94f5-8a9d381374ab", "eventTime": "2019-07-12T10:19:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJ1aTczRzMrUTFLNUZHRjdJZUVPUDIxUXhRQ0p4U0tCOTkvZStZelltRU54UVVFZks3aGRWbmlCRXVmMFFTQ1pZaGlhamxKeEZpQUJ1ZUFuQkRaOEJSUEIvVmRseHFRa1FoMzhYaXRBbjVkMExQRTlWd01DS1JBa3Y3ZUdlanhkekJLRVlRT2VpOVF4RXovRS9aMEtVelJGVG1CTjJHYk4wWGdYM28wOXFKMWJIamg2dSsxVnlyWkpvM1pNbWcxSDZlelp0M1Zic2xKc2tYaUdKaGNta0E5SDZWT2oxcjEwPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae612b0f-b570-4382-81fd-5df8f753c63c", "record_id": "flaws_cloudtrail:0000193:ae612b0f-b570-4382-81fd-5df8f753c63c", "row_index": 193, "timestamp": "2019-07-12T10:19:23Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1098, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae612b0f-b570-4382-81fd-5df8f753c63c", "eventTime": "2019-07-12T10:19:23Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJOWnF2NzJGb0lESmV6a0l1a0NzR0ZjSlZIazZWTjRGNzNaNEdvTkFtd3p5K1FrakxsRkt2TkRhNEpqOFFnbEhMQ2ZjOURWeFVENE01d3pIRWs5VEFFekJDeHR6cUY1ZFlWYitrcW1FS1NMSGR6QlQwbDRkaFJ0N1c4TDYrNW9PcmtnZ2IrSkxMVlpNYUlIaTVNSHFhRmgwV1pBd3R5UUtiT1FIUDdDK2lZZlg3dHlQYmhsUmRsc3liZHhGN1RXVmhaQkF1NnIwRHhqS1hJdkVPNzdLWEVnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5c0e7eb-cada-4af5-aa57-53b85e87446b", "record_id": "flaws_cloudtrail:0000194:e5c0e7eb-cada-4af5-aa57-53b85e87446b", "row_index": 194, "timestamp": "2019-07-12T10:19:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5c0e7eb-cada-4af5-aa57-53b85e87446b", "eventTime": "2019-07-12T10:19:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxNmxnYTZsYWFZbVQxVVJWSjROL2ZrOHFEMkF4QkRWVmhKVkRRTlRucVhVODZiRTNIUFNDRytCYzZydmxmWENHMWI5UjE3QlVZSFhjWHJMR0ZIZ2M0elpNQUdWUVVyUnVCL0ZsRkdlVERTc2pGNndNU0toamNUekZZTnRZM0xxdXZkZzFFd1RoeHdHV3NoUEo1UWJnR2FDREZaRXNLaDNQRGdmQ1UyQ3ZlR3daTHdnSmxhOHBiOE1idkpzSUF5SnRSdHQ5emVtdVdnUUNRTlZjZjM1T2Q4UmJTZTdHREpVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5c0e7eb-cada-4af5-aa57-53b85e87446b", "record_id": "flaws_cloudtrail:0000195:e5c0e7eb-cada-4af5-aa57-53b85e87446b", "row_index": 195, "timestamp": "2019-07-12T10:19:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1110, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5c0e7eb-cada-4af5-aa57-53b85e87446b", "eventTime": "2019-07-12T10:19:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiIxNmxnYTZsYWFZbVQxVVJWSjROL2ZrOHFEMkF4QkRWVmhKVkRRTlRucVhVODZiRTNIUFNDRytCYzZydmxmWENHMWI5UjE3QlVZSFhjWHJMR0ZIZ2M0elpNQUdWUVVyUnVCL0ZsRkdlVERTc2pGNndNU0toamNUekZZTnRZM0xxdXZkZzFFd1RoeHdHV3NoUEo1UWJnR2FDREZaRXNLaDNQRGdmQ1UyQ3ZlR3daTHdnSmxhOHBiOE1idkpzSUF5SnRSdHQ5emVtdVdnUUNRTlZjZjM1T2Q4UmJTZTdHREpVPSIsInMiOiIxIn0=", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2723b10-bff0-4a51-9d95-fe1cce9d20d8", "record_id": "flaws_cloudtrail:0000196:b2723b10-bff0-4a51-9d95-fe1cce9d20d8", "row_index": 196, "timestamp": "2019-07-12T10:19:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2723b10-bff0-4a51-9d95-fe1cce9d20d8", "eventTime": "2019-07-12T10:19:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeHdtWDUyR0dNUk44UzQ4Q3FvN3N3c2Z5VHdjNG1xc2U0WnBRM0VIUW9GWndOcVR2WUMrb1VXVDVVN3BmYXgvSXFEMFlIeHZ2djhNeEQxTHR1MlV2TzJNeVBCTlVJWkxTekQwM0hqb2tCWHVpZzhuMkthTlpBYTREamcwdURLOEFkSnUzNmtkeW1TM2tnR1R3K1QyNnpSTzBqelY5K0RmZ0c2L1FvdDJKS1orNElzNlBRRDV3a1pOQ2w3UHZFU0FEMytlSHBVL1l1MzAySGw2Q3F3eEZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2723b10-bff0-4a51-9d95-fe1cce9d20d8", "record_id": "flaws_cloudtrail:0000197:b2723b10-bff0-4a51-9d95-fe1cce9d20d8", "row_index": 197, "timestamp": "2019-07-12T10:19:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 1095, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2723b10-bff0-4a51-9d95-fe1cce9d20d8", "eventTime": "2019-07-12T10:19:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMiIsImMiOiJHeHdtWDUyR0dNUk44UzQ4Q3FvN3N3c2Z5VHdjNG1xc2U0WnBRM0VIUW9GWndOcVR2WUMrb1VXVDVVN3BmYXgvSXFEMFlIeHZ2djhNeEQxTHR1MlV2TzJNeVBCTlVJWkxTekQwM0hqb2tCWHVpZzhuMkthTlpBYTREamcwdURLOEFkSnUzNmtkeW1TM2tnR1R3K1QyNnpSTzBqelY5K0RmZ0c2L1FvdDJKS1orNElzNlBRRDV3a1pOQ2w3UHZFU0FEMytlSHBVL1l1MzAySGw2Q3F3eEZBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82bf5ce0-a878-4929-99a1-d9dc117900", "record_id": "flaws_cloudtrail:0000198:82bf5ce0-a878-4929-99a1-d9dc117900", "row_index": 198, "timestamp": "2019-07-12T10:19:26Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82bf5ce0-a878-4929-99a1-d9dc117900", "eventTime": "2019-07-12T10:19:26Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82bf5ce0-a878-4929-99a1-d9dc117900", "record_id": "flaws_cloudtrail:0000199:82bf5ce0-a878-4929-99a1-d9dc117900", "row_index": 199, "timestamp": "2019-07-12T10:19:26Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82bf5ce0-a878-4929-99a1-d9dc117900", "eventTime": "2019-07-12T10:19:26Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2f19166-be12-4cb3-8a04-68dc58179", "record_id": "flaws_cloudtrail:0000200:a2f19166-be12-4cb3-8a04-68dc58179", "row_index": 200, "timestamp": "2019-07-12T10:19:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2f19166-be12-4cb3-8a04-68dc58179", "eventTime": "2019-07-12T10:19:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2f19166-be12-4cb3-8a04-68dc58179", "record_id": "flaws_cloudtrail:0000201:a2f19166-be12-4cb3-8a04-68dc58179", "row_index": 201, "timestamp": "2019-07-12T10:19:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2f19166-be12-4cb3-8a04-68dc58179", "eventTime": "2019-07-12T10:19:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3da4b8df-9dae-43e8-a6a4-ad084b692e03", "record_id": "flaws_cloudtrail:0000202:3da4b8df-9dae-43e8-a6a4-ad084b692e03", "row_index": 202, "timestamp": "2019-07-12T10:20:05Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA36K31NGCDEA3AG1L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.171.29.90", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3508"], "raw_record_size_bytes": 620, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3da4b8df-9dae-43e8-a6a4-ad084b692e03", "eventTime": "2019-07-12T10:20:05Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.171.29.90", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA36K31NGCDEA3AG1L", "userName": "backup"}, "requestParameters": {"name": "trail-3508"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3508"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033b4774-40e9-4877-a58a-46b82d2fcb16", "record_id": "flaws_cloudtrail:0000203:033b4774-40e9-4877-a58a-46b82d2fcb16", "row_index": 203, "timestamp": "2019-07-12T10:20:14Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033b4774-40e9-4877-a58a-46b82d2fcb16", "eventTime": "2019-07-12T10:20:14Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bb6d8cb-b547-4a1e-85c3-e43afc01892", "record_id": "flaws_cloudtrail:0000204:0bb6d8cb-b547-4a1e-85c3-e43afc01892", "row_index": 204, "timestamp": "2019-07-12T10:20:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bb6d8cb-b547-4a1e-85c3-e43afc01892", "eventTime": "2019-07-12T10:20:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "033b4774-40e9-4877-a58a-46b82d2fcb16", "record_id": "flaws_cloudtrail:0000205:033b4774-40e9-4877-a58a-46b82d2fcb16", "row_index": 205, "timestamp": "2019-07-12T10:20:14Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "033b4774-40e9-4877-a58a-46b82d2fcb16", "eventTime": "2019-07-12T10:20:14Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0bb6d8cb-b547-4a1e-85c3-e43afc01892", "record_id": "flaws_cloudtrail:0000206:0bb6d8cb-b547-4a1e-85c3-e43afc01892", "row_index": 206, "timestamp": "2019-07-12T10:20:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0bb6d8cb-b547-4a1e-85c3-e43afc01892", "eventTime": "2019-07-12T10:20:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa1ca3f6-3fbc-4b96-b815-976630a9e4de9", "record_id": "flaws_cloudtrail:0000207:aa1ca3f6-3fbc-4b96-b815-976630a9e4de9", "row_index": 207, "timestamp": "2019-07-12T10:20:24Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa1ca3f6-3fbc-4b96-b815-976630a9e4de9", "eventTime": "2019-07-12T10:20:24Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa1ca3f6-3fbc-4b96-b815-976630a9e4de9", "record_id": "flaws_cloudtrail:0000208:aa1ca3f6-3fbc-4b96-b815-976630a9e4de9", "row_index": 208, "timestamp": "2019-07-12T10:20:24Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa1ca3f6-3fbc-4b96-b815-976630a9e4de9", "eventTime": "2019-07-12T10:20:24Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee50c994-320c-4245-a4a4-a541d29a0aee", "record_id": "flaws_cloudtrail:0000209:ee50c994-320c-4245-a4a4-a541d29a0aee", "row_index": 209, "timestamp": "2019-07-12T10:21:02Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee50c994-320c-4245-a4a4-a541d29a0aee", "eventTime": "2019-07-12T10:21:02Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee50c994-320c-4245-a4a4-a541d29a0aee", "record_id": "flaws_cloudtrail:0000210:ee50c994-320c-4245-a4a4-a541d29a0aee", "row_index": 210, "timestamp": "2019-07-12T10:21:02Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee50c994-320c-4245-a4a4-a541d29a0aee", "eventTime": "2019-07-12T10:21:02Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a35b0e-dfe7-4446-bd2c-dabab864517f", "record_id": "flaws_cloudtrail:0000211:c3a35b0e-dfe7-4446-bd2c-dabab864517f", "row_index": 211, "timestamp": "2019-07-12T10:21:38Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a35b0e-dfe7-4446-bd2c-dabab864517f", "eventTime": "2019-07-12T10:21:38Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a35b0e-dfe7-4446-bd2c-dabab864517f", "record_id": "flaws_cloudtrail:0000212:c3a35b0e-dfe7-4446-bd2c-dabab864517f", "row_index": 212, "timestamp": "2019-07-12T10:21:38Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a35b0e-dfe7-4446-bd2c-dabab864517f", "eventTime": "2019-07-12T10:21:38Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c2d609c-ab79-44d7-a91d-3f6f6fb0b4b3", "record_id": "flaws_cloudtrail:0000213:2c2d609c-ab79-44d7-a91d-3f6f6fb0b4b3", "row_index": 213, "timestamp": "2019-07-12T10:21:58Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA36K31NGCDEA3AG1L", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "182.171.29.90", "user_agent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3508"], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c2d609c-ab79-44d7-a91d-3f6f6fb0b4b3", "eventTime": "2019-07-12T10:21:58Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "182.171.29.90", "userAgent": "aws-sdk-go/1.34.13 (go1.14.4; linux; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA36K31NGCDEA3AG1L", "userName": "backup"}, "requestParameters": {"name": "trail-3508", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-3508"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2b57fae-366b-4217-a23d-81efe940d2d2", "record_id": "flaws_cloudtrail:0000214:f2b57fae-366b-4217-a23d-81efe940d2d2", "row_index": 214, "timestamp": "2019-07-12T10:22:30Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2b57fae-366b-4217-a23d-81efe940d2d2", "eventTime": "2019-07-12T10:22:30Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2b57fae-366b-4217-a23d-81efe940d2d2", "record_id": "flaws_cloudtrail:0000215:f2b57fae-366b-4217-a23d-81efe940d2d2", "row_index": 215, "timestamp": "2019-07-12T10:22:30Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2b57fae-366b-4217-a23d-81efe940d2d2", "eventTime": "2019-07-12T10:22:30Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0925dd21-9bda-4d86-8398-8f7ac1c5e89f", "record_id": "flaws_cloudtrail:0000216:0925dd21-9bda-4d86-8398-8f7ac1c5e89f", "row_index": 216, "timestamp": "2019-07-12T10:22:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0925dd21-9bda-4d86-8398-8f7ac1c5e89f", "eventTime": "2019-07-12T10:22:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0925dd21-9bda-4d86-8398-8f7ac1c5e89f", "record_id": "flaws_cloudtrail:0000217:0925dd21-9bda-4d86-8398-8f7ac1c5e89f", "row_index": 217, "timestamp": "2019-07-12T10:22:44Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0925dd21-9bda-4d86-8398-8f7ac1c5e89f", "eventTime": "2019-07-12T10:22:44Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53754a6b-b99b-41f4-be01-89b20a689a58", "record_id": "flaws_cloudtrail:0000218:53754a6b-b99b-41f4-be01-89b20a689a58", "row_index": 218, "timestamp": "2019-07-12T10:22:52Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53754a6b-b99b-41f4-be01-89b20a689a58", "eventTime": "2019-07-12T10:22:52Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53754a6b-b99b-41f4-be01-89b20a689a58", "record_id": "flaws_cloudtrail:0000219:53754a6b-b99b-41f4-be01-89b20a689a58", "row_index": 219, "timestamp": "2019-07-12T10:22:52Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53754a6b-b99b-41f4-be01-89b20a689a58", "eventTime": "2019-07-12T10:22:52Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "188b9f5a-b0fe-4949-b8f3-5b2f835954", "record_id": "flaws_cloudtrail:0000220:188b9f5a-b0fe-4949-b8f3-5b2f835954", "row_index": 220, "timestamp": "2019-07-12T10:22:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "188b9f5a-b0fe-4949-b8f3-5b2f835954", "eventTime": "2019-07-12T10:22:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "188b9f5a-b0fe-4949-b8f3-5b2f835954", "record_id": "flaws_cloudtrail:0000221:188b9f5a-b0fe-4949-b8f3-5b2f835954", "row_index": 221, "timestamp": "2019-07-12T10:22:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "188b9f5a-b0fe-4949-b8f3-5b2f835954", "eventTime": "2019-07-12T10:22:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.19.0-kali4-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5dae18d-ca47-4cc0-baa7-d1e5dae27c55", "record_id": "flaws_cloudtrail:0000222:a5dae18d-ca47-4cc0-baa7-d1e5dae27c55", "row_index": 222, "timestamp": "2019-07-12T10:22:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5dae18d-ca47-4cc0-baa7-d1e5dae27c55", "eventTime": "2019-07-12T10:22:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5dae18d-ca47-4cc0-baa7-d1e5dae27c55", "record_id": "flaws_cloudtrail:0000223:a5dae18d-ca47-4cc0-baa7-d1e5dae27c55", "row_index": 223, "timestamp": "2019-07-12T10:22:55Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5dae18d-ca47-4cc0-baa7-d1e5dae27c55", "eventTime": "2019-07-12T10:22:55Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82e8c185-520f-4ba7-b982-e58fff057c1c", "record_id": "flaws_cloudtrail:0000224:82e8c185-520f-4ba7-b982-e58fff057c1c", "row_index": 224, "timestamp": "2019-07-12T10:23:01Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1318, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82e8c185-520f-4ba7-b982-e58fff057c1c", "eventTime": "2019-07-12T10:23:01Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-2a0b3b47", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-2a0b3b47&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F038983%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=038983T70144Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=faf3a488c29a55f3943fbc81ccf5b0b06094e6c5dc8d22918d3ed2ffa1ae84d8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82e8c185-520f-4ba7-b982-e58fff057c1c", "record_id": "flaws_cloudtrail:0000225:82e8c185-520f-4ba7-b982-e58fff057c1c", "row_index": 225, "timestamp": "2019-07-12T10:23:01Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1318, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82e8c185-520f-4ba7-b982-e58fff057c1c", "eventTime": "2019-07-12T10:23:01Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-2a0b3b47", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-2a0b3b47&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F038983%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=038983T70144Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=faf3a488c29a55f3943fbc81ccf5b0b06094e6c5dc8d22918d3ed2ffa1ae84d8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "321892e-0fd9-405f-bf0a-5f6038ee6a9a", "record_id": "flaws_cloudtrail:0000226:321892e-0fd9-405f-bf0a-5f6038ee6a9a", "row_index": 226, "timestamp": "2019-07-12T10:23:13Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1318, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "321892e-0fd9-405f-bf0a-5f6038ee6a9a", "eventTime": "2019-07-12T10:23:13Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-2a0b3b47", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-2a0b3b47&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F038983%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=038983T480779Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=d49e992b9badb322cac9916fc44492567e680ff8ae3ac98124572d6725da7954"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "321892e-0fd9-405f-bf0a-5f6038ee6a9a", "record_id": "flaws_cloudtrail:0000227:321892e-0fd9-405f-bf0a-5f6038ee6a9a", "row_index": 227, "timestamp": "2019-07-12T10:23:13Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1318, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "321892e-0fd9-405f-bf0a-5f6038ee6a9a", "eventTime": "2019-07-12T10:23:13Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-2a0b3b47", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-2a0b3b47&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F038983%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=038983T480779Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=d49e992b9badb322cac9916fc44492567e680ff8ae3ac98124572d6725da7954"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49675e0-09b5-45ba-94e7-cca847a2dde5", "record_id": "flaws_cloudtrail:0000228:49675e0-09b5-45ba-94e7-cca847a2dde5", "row_index": 228, "timestamp": "2019-07-12T10:23:29Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49675e0-09b5-45ba-94e7-cca847a2dde5", "eventTime": "2019-07-12T10:23:29Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49675e0-09b5-45ba-94e7-cca847a2dde5", "record_id": "flaws_cloudtrail:0000229:49675e0-09b5-45ba-94e7-cca847a2dde5", "row_index": 229, "timestamp": "2019-07-12T10:23:29Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49675e0-09b5-45ba-94e7-cca847a2dde5", "eventTime": "2019-07-12T10:23:29Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a4b949-5561-4044-935a-ee1a42666dd1", "record_id": "flaws_cloudtrail:0000230:c4a4b949-5561-4044-935a-ee1a42666dd1", "row_index": 230, "timestamp": "2019-07-12T10:23:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a4b949-5561-4044-935a-ee1a42666dd1", "eventTime": "2019-07-12T10:23:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a4b949-5561-4044-935a-ee1a42666dd1", "record_id": "flaws_cloudtrail:0000231:c4a4b949-5561-4044-935a-ee1a42666dd1", "row_index": 231, "timestamp": "2019-07-12T10:23:43Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a4b949-5561-4044-935a-ee1a42666dd1", "eventTime": "2019-07-12T10:23:43Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "941bb724-8dfb-4f16-b4d6-6e06733bb17d", "record_id": "flaws_cloudtrail:0000232:941bb724-8dfb-4f16-b4d6-6e06733bb17d", "row_index": 232, "timestamp": "2019-07-12T10:25:24Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1317, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "941bb724-8dfb-4f16-b4d6-6e06733bb17d", "eventTime": "2019-07-12T10:25:24Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-2a0b3b47", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-2a0b3b47&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F038983%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=038983T066603Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=d9679d2b90a596898762c771b31bcb865569b697ee4ba02885ec6d1d65428ed8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "941bb724-8dfb-4f16-b4d6-6e06733bb17d", "record_id": "flaws_cloudtrail:0000233:941bb724-8dfb-4f16-b4d6-6e06733bb17d", "row_index": 233, "timestamp": "2019-07-12T10:25:24Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "4.255.255.46", "user_agent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1317, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "941bb724-8dfb-4f16-b4d6-6e06733bb17d", "eventTime": "2019-07-12T10:25:24Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "4.255.255.46", "userAgent": "aws-cli/1.16.113 Python/3.7.3 Linux/5.1.0-parrot1-3t-amd64 botocore/1.12.103", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-2a0b3b47", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&Version=2016-11-15&SourceRegion=us-west-2&SourceSnapshotId=snap-2a0b3b47&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=AKIA01U43UX3RBRDXF4Q%2F038983%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-Date=038983T066603Z&X-Amz-Expires=3600&X-Amz-SignedHeaders=host&X-Amz-Signature=d9679d2b90a596898762c771b31bcb865569b697ee4ba02885ec6d1d65428ed8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d59f247f-30f9-4ce8-b881-92d2b1ddaae2", "record_id": "flaws_cloudtrail:0000234:d59f247f-30f9-4ce8-b881-92d2b1ddaae2", "row_index": 234, "timestamp": "2019-07-12T10:25:50Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d59f247f-30f9-4ce8-b881-92d2b1ddaae2", "eventTime": "2019-07-12T10:25:50Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d59f247f-30f9-4ce8-b881-92d2b1ddaae2", "record_id": "flaws_cloudtrail:0000235:d59f247f-30f9-4ce8-b881-92d2b1ddaae2", "row_index": 235, "timestamp": "2019-07-12T10:25:50Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "0.182.152.249", "user_agent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d59f247f-30f9-4ce8-b881-92d2b1ddaae2", "eventTime": "2019-07-12T10:25:50Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "0.182.152.249", "userAgent": "aws-cli/1.16.197 Python/3.7.3 Linux/4.19.0-parrot4-28t-amd64 botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f35dc5c-73b7-4865-9ce9-8c250ef6d28f", "record_id": "flaws_cloudtrail:0000236:6f35dc5c-73b7-4865-9ce9-8c250ef6d28f", "row_index": 236, "timestamp": "2019-07-12T10:26:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f35dc5c-73b7-4865-9ce9-8c250ef6d28f", "eventTime": "2019-07-12T10:26:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f35dc5c-73b7-4865-9ce9-8c250ef6d28f", "record_id": "flaws_cloudtrail:0000237:6f35dc5c-73b7-4865-9ce9-8c250ef6d28f", "row_index": 237, "timestamp": "2019-07-12T10:26:03Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f35dc5c-73b7-4865-9ce9-8c250ef6d28f", "eventTime": "2019-07-12T10:26:03Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401a0069-a806-48d0-822e-8bd14a18a573", "record_id": "flaws_cloudtrail:0000238:401a0069-a806-48d0-822e-8bd14a18a573", "row_index": 238, "timestamp": "2019-07-12T10:26:16Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401a0069-a806-48d0-822e-8bd14a18a573", "eventTime": "2019-07-12T10:26:16Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401a0069-a806-48d0-822e-8bd14a18a573", "record_id": "flaws_cloudtrail:0000239:401a0069-a806-48d0-822e-8bd14a18a573", "row_index": 239, "timestamp": "2019-07-12T10:26:16Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401a0069-a806-48d0-822e-8bd14a18a573", "eventTime": "2019-07-12T10:26:16Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "badc9bae-3c31-44cb-939b-786ba18d7385", "record_id": "flaws_cloudtrail:0000240:badc9bae-3c31-44cb-939b-786ba18d7385", "row_index": 240, "timestamp": "2019-07-12T10:26:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1620, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "badc9bae-3c31-44cb-939b-786ba18d7385", "eventTime": "2019-07-12T10:26:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGFGPDH93IHVOM9YB", "expiration": "Jul 12, 2019 10:26:37 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a611e58-c093-4f51-bb97-28f2b993e35b", "record_id": "flaws_cloudtrail:0000241:4a611e58-c093-4f51-bb97-28f2b993e35b", "row_index": 241, "timestamp": "2019-07-12T10:26:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a611e58-c093-4f51-bb97-28f2b993e35b", "eventTime": "2019-07-12T10:26:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUW5VG241HVE3EFMP", "expiration": "Jul 12, 2019 10:26:37 PM", "sessionToken": "AgoJb3JpZ2luX2VjEGMaCXVzLXdlc3QtMiJGMEQCICA5w2GeowCTx4yy6W8xK36gd1cH7pS3hYoQI0aBI5kHAiAInm2Zo7TXLQV2bobwaiwo7xky8wvqX7w46asplp81TyqLAgi8//////////8BEAAaDDk3NTQyNjI2MjAyOSIMPwsNtA5pWh6dtUMvKt8BjcFMokDToj1cmVci4RgR97nSxKKdEVkgHqReC5NPCzrKh5GaEL/i/BxPCG39uoj8hNUR/QVmZxBtZkVkUswT6XGYhVfc5c1MnN4OfK4IDGW1jPFn7RAAUoBElZlvaQBgKMZ4rfFi96uP/zHS0OohbT445yfk46WUByJ90LV8CjXVD5U9rSEGDWjUqrYwVyUGgkJE2pd0KZcz5KqrfQFRFkxiiW2evUKowy3cGSYyc0c9fi/Fs/Ny0Jd2kTJvY8Ft0jevRFei0SUL3LhVfe87b6GkCO4m/olKxOamcAa0mDDdwKHpBTq1ATMhud6zL9boZKYxVWW1dM5vEvs5TMt5cdmdRbAR42boSMIdhH6OkYxLCSgshUh+9wU96S2+KVy15Pzl0SuKQm19AeErUxCmhCxwyHs8koKgyp9JUX3Cv6w6lQgv7eVBq3V0G1/nfsLAIHYGyDcNG2aOtpKZFAjQwl7sC9BcJyWXxjE+Oz+ZDs4ZDipz6ubLZyedyXJG6NqDBlK6JGh1SSKoMT+d4knItPA7G/hYxmjebst6pGY="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e48c76-58fe-4606-b02c-cf7bbe871004", "record_id": "flaws_cloudtrail:0000242:61e48c76-58fe-4606-b02c-cf7bbe871004", "row_index": 242, "timestamp": "2019-07-12T10:26:37Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAGFGPDH93IHVOM9YB", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "161.253.127.2", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e48c76-58fe-4606-b02c-cf7bbe871004", "eventTime": "2019-07-12T10:26:37Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.253.127.2", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAGFGPDH93IHVOM9YB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T10:26:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/12/[$LATEST]0bb16f2fa5bca62e3e74af6693522066"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "badc9bae-3c31-44cb-939b-786ba18d7385", "record_id": "flaws_cloudtrail:0000243:badc9bae-3c31-44cb-939b-786ba18d7385", "row_index": 243, "timestamp": "2019-07-12T10:26:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1620, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "badc9bae-3c31-44cb-939b-786ba18d7385", "eventTime": "2019-07-12T10:26:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGFGPDH93IHVOM9YB", "expiration": "Jul 12, 2019 10:26:37 PM", "sessionToken": "AgoJb3JpZ2luX2VjEGMaCXVzLXdlc3QtMiJGMEQCIFR3rpAs41+j8mbjVkJKaw5LSixnkIRQnTdef1A4m0v6AiAZoWDvF+oXPoJ8QLw/PFTmcDfSSlC1w/NuU9wbvfYrSSqLAgi8//////////8BEAAaDDk3NTQyNjI2MjAyOSIM2R/xikHxZ31K9v4SKt8B67KTAPzOqIeTgtDsGTzpotafTVLBQidIfDay+zeMjSR8mVCwjO58b0AJ3boUATp/omlu7n5NGPaVWMZ5y/ajLUUJZe9JwmChWssIz4BMmMXW/LX7AV0t+4r7yPh78Dt0JI3zUFRNmIVYm3wIJge2zo0AL5V26w2oeRZ0CXe+NvkN7xslctmqLBPRJ8wM0AWyhSyD+4WRxCjHWBkMCUqVbr015jDJsf9Vyl+L/k0dKpWevPE+ct/mffiO3EFi/lTo2JLfR2uGDW5Z0UCGZwZT1LmbHQFvB1/isnzgWFsRMjDdwKHpBTq1AfnjxxwBbXfYRI2FeA3n5Zu7N1nA5/+smm+476524EWUsjbGw6IUSLPBy2LYqBAUN1nyz0AKYxahc0xI/WShKIXIrgvtwl+WZSAjN/h7pCZEiz03zmrwum1/urT8xfF4p5tR45aRxQDrUFnwaLTXYOGsgOCKRf/kDu7K5xdVrg68+Aw5pz81ynLX9Kb6Pf71doxy8ZSlzebo88wTQbnuMWEIXiJEcQcmN8APbnh9owvJhLnN1UJM="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a611e58-c093-4f51-bb97-28f2b993e35b", "record_id": "flaws_cloudtrail:0000244:4a611e58-c093-4f51-bb97-28f2b993e35b", "row_index": 244, "timestamp": "2019-07-12T10:26:37Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1619, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a611e58-c093-4f51-bb97-28f2b993e35b", "eventTime": "2019-07-12T10:26:37Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUW5VG241HVE3EFMP", "expiration": "Jul 12, 2019 10:26:37 PM", "sessionToken": "AgoJb3JpZ2luX2VjEGMaCXVzLXdlc3QtMiJGMEQCICA5w2GeowCTx4yy6W8xK36gd1cH7pS3hYoQI0aBI5kHAiAInm2Zo7TXLQV2bobwaiwo7xky8wvqX7w46asplp81TyqLAgi8//////////8BEAAaDDk3NTQyNjI2MjAyOSIMPwsNtA5pWh6dtUMvKt8BjcFMokDToj1cmVci4RgR97nSxKKdEVkgHqReC5NPCzrKh5GaEL/i/BxPCG39uoj8hNUR/QVmZxBtZkVkUswT6XGYhVfc5c1MnN4OfK4IDGW1jPFn7RAAUoBElZlvaQBgKMZ4rfFi96uP/zHS0OohbT445yfk46WUByJ90LV8CjXVD5U9rSEGDWjUqrYwVyUGgkJE2pd0KZcz5KqrfQFRFkxiiW2evUKowy3cGSYyc0c9fi/Fs/Ny0Jd2kTJvY8Ft0jevRFei0SUL3LhVfe87b6GkCO4m/olKxOamcAa0mDDdwKHpBTq1ATMhud6zL9boZKYxVWW1dM5vEvs5TMt5cdmdRbAR42boSMIdhH6OkYxLCSgshUh+9wU96S2+KVy15Pzl0SuKQm19AeErUxCmhCxwyHs8koKgyp9JUX3Cv6w6lQgv7eVBq3V0G1/nfsLAIHYGyDcNG2aOtpKZFAjQwl7sC9BcJyWXxjE+Oz+ZDs4ZDipz6ubLZyedyXJG6NqDBlK6JGh1SSKoMT+d4knItPA7G/hYxmjebst6pGY="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e48c76-58fe-4606-b02c-cf7bbe871004", "record_id": "flaws_cloudtrail:0000245:61e48c76-58fe-4606-b02c-cf7bbe871004", "row_index": 245, "timestamp": "2019-07-12T10:26:37Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAGFGPDH93IHVOM9YB", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "161.253.127.2", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1030, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e48c76-58fe-4606-b02c-cf7bbe871004", "eventTime": "2019-07-12T10:26:37Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "161.253.127.2", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAGFGPDH93IHVOM9YB", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T10:26:37Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2019/07/12/[$LATEST]0bb16f2fa5bca62e3e74af6693522066"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa034fed-da00-4546-b280-24f288299bdc2", "record_id": "flaws_cloudtrail:0000246:aa034fed-da00-4546-b280-24f288299bdc2", "row_index": 246, "timestamp": "2019-07-12T10:26:59Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa034fed-da00-4546-b280-24f288299bdc2", "eventTime": "2019-07-12T10:26:59Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa034fed-da00-4546-b280-24f288299bdc2", "record_id": "flaws_cloudtrail:0000247:aa034fed-da00-4546-b280-24f288299bdc2", "row_index": 247, "timestamp": "2019-07-12T10:26:59Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "237.4.0.201", "user_agent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa034fed-da00-4546-b280-24f288299bdc2", "eventTime": "2019-07-12T10:26:59Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "237.4.0.201", "userAgent": "aws-cli/1.16.197 Python/2.7.16 Linux/4.4.0-01985-Microsoft botocore/1.12.187", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f31157-2dda-424b-a245-513862be1", "record_id": "flaws_cloudtrail:0000248:2f31157-2dda-424b-a245-513862be1", "row_index": 248, "timestamp": "2019-07-12T10:29:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f31157-2dda-424b-a245-513862be1", "eventTime": "2019-07-12T10:29:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA56V0UDSLIY75PTLI", "expiration": "Jul 12, 2019 5:01:02 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f31157-2dda-424b-a245-513862be1", "record_id": "flaws_cloudtrail:0000249:2f31157-2dda-424b-a245-513862be1", "row_index": 249, "timestamp": "2019-07-12T10:29:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f31157-2dda-424b-a245-513862be1", "eventTime": "2019-07-12T10:29:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA56V0UDSLIY75PTLI", "expiration": "Jul 12, 2019 5:01:02 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b719f9a2-a5cf-4e25-98de-7a270e92a80f", "record_id": "flaws_cloudtrail:0000250:b719f9a2-a5cf-4e25-98de-7a270e92a80f", "row_index": 250, "timestamp": "2019-07-12T11:29:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b719f9a2-a5cf-4e25-98de-7a270e92a80f", "eventTime": "2019-07-12T11:29:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGJRQBE6PPHQ849TZ", "expiration": "Jul 12, 2019 5:49:06 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b719f9a2-a5cf-4e25-98de-7a270e92a80f", "record_id": "flaws_cloudtrail:0000251:b719f9a2-a5cf-4e25-98de-7a270e92a80f", "row_index": 251, "timestamp": "2019-07-12T11:29:16Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b719f9a2-a5cf-4e25-98de-7a270e92a80f", "eventTime": "2019-07-12T11:29:16Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAGJRQBE6PPHQ849TZ", "expiration": "Jul 12, 2019 5:49:06 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "393509c13-45de-464a-b057-458627e0b5a09", "record_id": "flaws_cloudtrail:0000252:393509c13-45de-464a-b057-458627e0b5a09", "row_index": 252, "timestamp": "2019-07-12T11:30:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "393509c13-45de-464a-b057-458627e0b5a09", "eventTime": "2019-07-12T11:30:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "393509c13-45de-464a-b057-458627e0b5a09", "record_id": "flaws_cloudtrail:0000253:393509c13-45de-464a-b057-458627e0b5a09", "row_index": 253, "timestamp": "2019-07-12T11:30:12Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "393509c13-45de-464a-b057-458627e0b5a09", "eventTime": "2019-07-12T11:30:12Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305e3348-2c12-4f8c-a86f-d404b9d454d5", "record_id": "flaws_cloudtrail:0000254:305e3348-2c12-4f8c-a86f-d404b9d454d5", "row_index": 254, "timestamp": "2019-07-12T11:30:13Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305e3348-2c12-4f8c-a86f-d404b9d454d5", "eventTime": "2019-07-12T11:30:13Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0de1f9-3af8-4b81-b025-a4a988f0a7f4", "record_id": "flaws_cloudtrail:0000255:1a0de1f9-3af8-4b81-b025-a4a988f0a7f4", "row_index": 255, "timestamp": "2019-07-12T11:30:13Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0de1f9-3af8-4b81-b025-a4a988f0a7f4", "eventTime": "2019-07-12T11:30:13Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ed822413-f7a1-47a7-9a25-706f02bd577e", "record_id": "flaws_cloudtrail:0000256:0ed822413-f7a1-47a7-9a25-706f02bd577e", "row_index": 256, "timestamp": "2019-07-12T11:30:13Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ed822413-f7a1-47a7-9a25-706f02bd577e", "eventTime": "2019-07-12T11:30:13Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "305e3348-2c12-4f8c-a86f-d404b9d454d5", "record_id": "flaws_cloudtrail:0000257:305e3348-2c12-4f8c-a86f-d404b9d454d5", "row_index": 257, "timestamp": "2019-07-12T11:30:13Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "305e3348-2c12-4f8c-a86f-d404b9d454d5", "eventTime": "2019-07-12T11:30:13Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a0de1f9-3af8-4b81-b025-a4a988f0a7f4", "record_id": "flaws_cloudtrail:0000258:1a0de1f9-3af8-4b81-b025-a4a988f0a7f4", "row_index": 258, "timestamp": "2019-07-12T11:30:13Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a0de1f9-3af8-4b81-b025-a4a988f0a7f4", "eventTime": "2019-07-12T11:30:13Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ed822413-f7a1-47a7-9a25-706f02bd577e", "record_id": "flaws_cloudtrail:0000259:0ed822413-f7a1-47a7-9a25-706f02bd577e", "row_index": 259, "timestamp": "2019-07-12T11:30:13Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ed822413-f7a1-47a7-9a25-706f02bd577e", "eventTime": "2019-07-12T11:30:13Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55d4c610-24bd-4170-8da6-1b1a841d2916", "record_id": "flaws_cloudtrail:0000260:55d4c610-24bd-4170-8da6-1b1a841d2916", "row_index": 260, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55d4c610-24bd-4170-8da6-1b1a841d2916", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4d509c7-dafa-428f-93b2-7b874a800ed8", "record_id": "flaws_cloudtrail:0000261:e4d509c7-dafa-428f-93b2-7b874a800ed8", "row_index": 261, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4d509c7-dafa-428f-93b2-7b874a800ed8", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "362200b4-eb19-426a-a62c-74325ded03e4", "record_id": "flaws_cloudtrail:0000262:362200b4-eb19-426a-a62c-74325ded03e4", "row_index": 262, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "362200b4-eb19-426a-a62c-74325ded03e4", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88cf9852-c3e0-4dd3-83a0-cfe7dc17b0cd", "record_id": "flaws_cloudtrail:0000263:88cf9852-c3e0-4dd3-83a0-cfe7dc17b0cd", "row_index": 263, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88cf9852-c3e0-4dd3-83a0-cfe7dc17b0cd", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef132702-ce81-4cc6-bfd7-dec2a5fffe57", "record_id": "flaws_cloudtrail:0000264:ef132702-ce81-4cc6-bfd7-dec2a5fffe57", "row_index": 264, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef132702-ce81-4cc6-bfd7-dec2a5fffe57", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e24a3c-40b5-432b-9504-23d59deb3e2b", "record_id": "flaws_cloudtrail:0000265:36e24a3c-40b5-432b-9504-23d59deb3e2b", "row_index": 265, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e24a3c-40b5-432b-9504-23d59deb3e2b", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "848d0e5b-44ad-4816-ab6c-7368f725253b", "record_id": "flaws_cloudtrail:0000266:848d0e5b-44ad-4816-ab6c-7368f725253b", "row_index": 266, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "848d0e5b-44ad-4816-ab6c-7368f725253b", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90f8c4bf-bb0b-48eb-9648-92d31304dcb9", "record_id": "flaws_cloudtrail:0000267:90f8c4bf-bb0b-48eb-9648-92d31304dcb9", "row_index": 267, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90f8c4bf-bb0b-48eb-9648-92d31304dcb9", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4027aef-c613-4127-96b6-4535ab74c982", "record_id": "flaws_cloudtrail:0000268:a4027aef-c613-4127-96b6-4535ab74c982", "row_index": 268, "timestamp": "2019-07-12T11:30:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4027aef-c613-4127-96b6-4535ab74c982", "eventTime": "2019-07-12T11:30:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aaaf585-7180-4309-a6f6-fd548af205a4", "record_id": "flaws_cloudtrail:0000269:2aaaf585-7180-4309-a6f6-fd548af205a4", "row_index": 269, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aaaf585-7180-4309-a6f6-fd548af205a4", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdc52fdb-c630-438c-9508-526adf20e7c8", "record_id": "flaws_cloudtrail:0000270:fdc52fdb-c630-438c-9508-526adf20e7c8", "row_index": 270, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdc52fdb-c630-438c-9508-526adf20e7c8", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55d4c610-24bd-4170-8da6-1b1a841d2916", "record_id": "flaws_cloudtrail:0000271:55d4c610-24bd-4170-8da6-1b1a841d2916", "row_index": 271, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55d4c610-24bd-4170-8da6-1b1a841d2916", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4d509c7-dafa-428f-93b2-7b874a800ed8", "record_id": "flaws_cloudtrail:0000272:e4d509c7-dafa-428f-93b2-7b874a800ed8", "row_index": 272, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4d509c7-dafa-428f-93b2-7b874a800ed8", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "362200b4-eb19-426a-a62c-74325ded03e4", "record_id": "flaws_cloudtrail:0000273:362200b4-eb19-426a-a62c-74325ded03e4", "row_index": 273, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "362200b4-eb19-426a-a62c-74325ded03e4", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88cf9852-c3e0-4dd3-83a0-cfe7dc17b0cd", "record_id": "flaws_cloudtrail:0000274:88cf9852-c3e0-4dd3-83a0-cfe7dc17b0cd", "row_index": 274, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88cf9852-c3e0-4dd3-83a0-cfe7dc17b0cd", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef132702-ce81-4cc6-bfd7-dec2a5fffe57", "record_id": "flaws_cloudtrail:0000275:ef132702-ce81-4cc6-bfd7-dec2a5fffe57", "row_index": 275, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef132702-ce81-4cc6-bfd7-dec2a5fffe57", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36e24a3c-40b5-432b-9504-23d59deb3e2b", "record_id": "flaws_cloudtrail:0000276:36e24a3c-40b5-432b-9504-23d59deb3e2b", "row_index": 276, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36e24a3c-40b5-432b-9504-23d59deb3e2b", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "848d0e5b-44ad-4816-ab6c-7368f725253b", "record_id": "flaws_cloudtrail:0000277:848d0e5b-44ad-4816-ab6c-7368f725253b", "row_index": 277, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "848d0e5b-44ad-4816-ab6c-7368f725253b", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90f8c4bf-bb0b-48eb-9648-92d31304dcb9", "record_id": "flaws_cloudtrail:0000278:90f8c4bf-bb0b-48eb-9648-92d31304dcb9", "row_index": 278, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90f8c4bf-bb0b-48eb-9648-92d31304dcb9", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4027aef-c613-4127-96b6-4535ab74c982", "record_id": "flaws_cloudtrail:0000279:a4027aef-c613-4127-96b6-4535ab74c982", "row_index": 279, "timestamp": "2019-07-12T11:30:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4027aef-c613-4127-96b6-4535ab74c982", "eventTime": "2019-07-12T11:30:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2aaaf585-7180-4309-a6f6-fd548af205a4", "record_id": "flaws_cloudtrail:0000280:2aaaf585-7180-4309-a6f6-fd548af205a4", "row_index": 280, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2aaaf585-7180-4309-a6f6-fd548af205a4", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdc52fdb-c630-438c-9508-526adf20e7c8", "record_id": "flaws_cloudtrail:0000281:fdc52fdb-c630-438c-9508-526adf20e7c8", "row_index": 281, "timestamp": "2019-07-12T11:30:35Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdc52fdb-c630-438c-9508-526adf20e7c8", "eventTime": "2019-07-12T11:30:35Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f515fee-fb45-4ee1-a399-dd09f48432da", "record_id": "flaws_cloudtrail:0000282:5f515fee-fb45-4ee1-a399-dd09f48432da", "row_index": 282, "timestamp": "2019-07-12T11:30:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f515fee-fb45-4ee1-a399-dd09f48432da", "eventTime": "2019-07-12T11:30:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecc035e5-61d4-4e64-8244-5a437a74e91f", "record_id": "flaws_cloudtrail:0000283:ecc035e5-61d4-4e64-8244-5a437a74e91f", "row_index": 283, "timestamp": "2019-07-12T11:30:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecc035e5-61d4-4e64-8244-5a437a74e91f", "eventTime": "2019-07-12T11:30:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad5328fa-c251-4afe-a851-de3e7b691e36", "record_id": "flaws_cloudtrail:0000284:ad5328fa-c251-4afe-a851-de3e7b691e36", "row_index": 284, "timestamp": "2019-07-12T11:30:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad5328fa-c251-4afe-a851-de3e7b691e36", "eventTime": "2019-07-12T11:30:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f515fee-fb45-4ee1-a399-dd09f48432da", "record_id": "flaws_cloudtrail:0000285:5f515fee-fb45-4ee1-a399-dd09f48432da", "row_index": 285, "timestamp": "2019-07-12T11:30:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f515fee-fb45-4ee1-a399-dd09f48432da", "eventTime": "2019-07-12T11:30:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecc035e5-61d4-4e64-8244-5a437a74e91f", "record_id": "flaws_cloudtrail:0000286:ecc035e5-61d4-4e64-8244-5a437a74e91f", "row_index": 286, "timestamp": "2019-07-12T11:30:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecc035e5-61d4-4e64-8244-5a437a74e91f", "eventTime": "2019-07-12T11:30:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad5328fa-c251-4afe-a851-de3e7b691e36", "record_id": "flaws_cloudtrail:0000287:ad5328fa-c251-4afe-a851-de3e7b691e36", "row_index": 287, "timestamp": "2019-07-12T11:30:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad5328fa-c251-4afe-a851-de3e7b691e36", "eventTime": "2019-07-12T11:30:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1caae8c4-dda2-4ab9-94eb-f8194d438d4b", "record_id": "flaws_cloudtrail:0000288:1caae8c4-dda2-4ab9-94eb-f8194d438d4b", "row_index": 288, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1caae8c4-dda2-4ab9-94eb-f8194d438d4b", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc82d404-6127-4399-bdec-b4688f964ed7", "record_id": "flaws_cloudtrail:0000289:cc82d404-6127-4399-bdec-b4688f964ed7", "row_index": 289, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc82d404-6127-4399-bdec-b4688f964ed7", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314f4004-fc91-40e5-8d25-4a6263abd2af", "record_id": "flaws_cloudtrail:0000290:314f4004-fc91-40e5-8d25-4a6263abd2af", "row_index": 290, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314f4004-fc91-40e5-8d25-4a6263abd2af", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "478700fc-4910-433d-a87c-9b1c4fcf5f5f", "record_id": "flaws_cloudtrail:0000291:478700fc-4910-433d-a87c-9b1c4fcf5f5f", "row_index": 291, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "478700fc-4910-433d-a87c-9b1c4fcf5f5f", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf366ee-8620-40c1-b334-744aabc749964", "record_id": "flaws_cloudtrail:0000292:baf366ee-8620-40c1-b334-744aabc749964", "row_index": 292, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf366ee-8620-40c1-b334-744aabc749964", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "807afdea-0b36-4d75-b99a-52ca553fb262", "record_id": "flaws_cloudtrail:0000293:807afdea-0b36-4d75-b99a-52ca553fb262", "row_index": 293, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "807afdea-0b36-4d75-b99a-52ca553fb262", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af8b7023-02ab-47f0-9352-8451f63a68ac", "record_id": "flaws_cloudtrail:0000294:af8b7023-02ab-47f0-9352-8451f63a68ac", "row_index": 294, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af8b7023-02ab-47f0-9352-8451f63a68ac", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64f20a2d-241a-46a6-8442-e1ae8271be52", "record_id": "flaws_cloudtrail:0000295:64f20a2d-241a-46a6-8442-e1ae8271be52", "row_index": 295, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64f20a2d-241a-46a6-8442-e1ae8271be52", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1caae8c4-dda2-4ab9-94eb-f8194d438d4b", "record_id": "flaws_cloudtrail:0000296:1caae8c4-dda2-4ab9-94eb-f8194d438d4b", "row_index": 296, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1caae8c4-dda2-4ab9-94eb-f8194d438d4b", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc82d404-6127-4399-bdec-b4688f964ed7", "record_id": "flaws_cloudtrail:0000297:cc82d404-6127-4399-bdec-b4688f964ed7", "row_index": 297, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc82d404-6127-4399-bdec-b4688f964ed7", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "314f4004-fc91-40e5-8d25-4a6263abd2af", "record_id": "flaws_cloudtrail:0000298:314f4004-fc91-40e5-8d25-4a6263abd2af", "row_index": 298, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "314f4004-fc91-40e5-8d25-4a6263abd2af", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "478700fc-4910-433d-a87c-9b1c4fcf5f5f", "record_id": "flaws_cloudtrail:0000299:478700fc-4910-433d-a87c-9b1c4fcf5f5f", "row_index": 299, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "478700fc-4910-433d-a87c-9b1c4fcf5f5f", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf366ee-8620-40c1-b334-744aabc749964", "record_id": "flaws_cloudtrail:0000300:baf366ee-8620-40c1-b334-744aabc749964", "row_index": 300, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf366ee-8620-40c1-b334-744aabc749964", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "807afdea-0b36-4d75-b99a-52ca553fb262", "record_id": "flaws_cloudtrail:0000301:807afdea-0b36-4d75-b99a-52ca553fb262", "row_index": 301, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "807afdea-0b36-4d75-b99a-52ca553fb262", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af8b7023-02ab-47f0-9352-8451f63a68ac", "record_id": "flaws_cloudtrail:0000302:af8b7023-02ab-47f0-9352-8451f63a68ac", "row_index": 302, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af8b7023-02ab-47f0-9352-8451f63a68ac", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64f20a2d-241a-46a6-8442-e1ae8271be52", "record_id": "flaws_cloudtrail:0000303:64f20a2d-241a-46a6-8442-e1ae8271be52", "row_index": 303, "timestamp": "2019-07-12T11:30:48Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64f20a2d-241a-46a6-8442-e1ae8271be52", "eventTime": "2019-07-12T11:30:48Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f88eb7-65e1-4394-b668-b0ae9d99fad1", "record_id": "flaws_cloudtrail:0000304:a1f88eb7-65e1-4394-b668-b0ae9d99fad1", "row_index": 304, "timestamp": "2019-07-12T11:32:45Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f88eb7-65e1-4394-b668-b0ae9d99fad1", "eventTime": "2019-07-12T11:32:45Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "527ae58b-a3f1-4b7a-a2b5-7918caab1353", "record_id": "flaws_cloudtrail:0000305:527ae58b-a3f1-4b7a-a2b5-7918caab1353", "row_index": 305, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "527ae58b-a3f1-4b7a-a2b5-7918caab1353", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ea4dee7-066d-456d-91b5-ebe322f31397", "record_id": "flaws_cloudtrail:0000306:4ea4dee7-066d-456d-91b5-ebe322f31397", "row_index": 306, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ea4dee7-066d-456d-91b5-ebe322f31397", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4c532d5-084b-4fee-8ef3-bf4e04f567c9", "record_id": "flaws_cloudtrail:0000307:d4c532d5-084b-4fee-8ef3-bf4e04f567c9", "row_index": 307, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4c532d5-084b-4fee-8ef3-bf4e04f567c9", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c23e614-9750-4d87-81f4-8e898891", "record_id": "flaws_cloudtrail:0000308:3c23e614-9750-4d87-81f4-8e898891", "row_index": 308, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c23e614-9750-4d87-81f4-8e898891", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2bc6e31-f4d7-4a1f-a161-9760dbf69cdc", "record_id": "flaws_cloudtrail:0000309:f2bc6e31-f4d7-4a1f-a161-9760dbf69cdc", "row_index": 309, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2bc6e31-f4d7-4a1f-a161-9760dbf69cdc", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcfccc4f-92af-49f4-b71d-6c2c74d563d7", "record_id": "flaws_cloudtrail:0000310:dcfccc4f-92af-49f4-b71d-6c2c74d563d7", "row_index": 310, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcfccc4f-92af-49f4-b71d-6c2c74d563d7", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52077f9b-f64a-4148-99cd-b80ebcb5982e", "record_id": "flaws_cloudtrail:0000311:52077f9b-f64a-4148-99cd-b80ebcb5982e", "row_index": 311, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52077f9b-f64a-4148-99cd-b80ebcb5982e", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9178ed48-2c1e-4fa7-82a9-36464f6", "record_id": "flaws_cloudtrail:0000312:9178ed48-2c1e-4fa7-82a9-36464f6", "row_index": 312, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9178ed48-2c1e-4fa7-82a9-36464f6", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e5ef39-c7d6-449e-aa8a-caea24f92b31", "record_id": "flaws_cloudtrail:0000313:e1e5ef39-c7d6-449e-aa8a-caea24f92b31", "row_index": 313, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e5ef39-c7d6-449e-aa8a-caea24f92b31", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f88eb7-65e1-4394-b668-b0ae9d99fad1", "record_id": "flaws_cloudtrail:0000314:a1f88eb7-65e1-4394-b668-b0ae9d99fad1", "row_index": 314, "timestamp": "2019-07-12T11:32:45Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f88eb7-65e1-4394-b668-b0ae9d99fad1", "eventTime": "2019-07-12T11:32:45Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "527ae58b-a3f1-4b7a-a2b5-7918caab1353", "record_id": "flaws_cloudtrail:0000315:527ae58b-a3f1-4b7a-a2b5-7918caab1353", "row_index": 315, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "527ae58b-a3f1-4b7a-a2b5-7918caab1353", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ea4dee7-066d-456d-91b5-ebe322f31397", "record_id": "flaws_cloudtrail:0000316:4ea4dee7-066d-456d-91b5-ebe322f31397", "row_index": 316, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ea4dee7-066d-456d-91b5-ebe322f31397", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4c532d5-084b-4fee-8ef3-bf4e04f567c9", "record_id": "flaws_cloudtrail:0000317:d4c532d5-084b-4fee-8ef3-bf4e04f567c9", "row_index": 317, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4c532d5-084b-4fee-8ef3-bf4e04f567c9", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c23e614-9750-4d87-81f4-8e898891", "record_id": "flaws_cloudtrail:0000318:3c23e614-9750-4d87-81f4-8e898891", "row_index": 318, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c23e614-9750-4d87-81f4-8e898891", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2bc6e31-f4d7-4a1f-a161-9760dbf69cdc", "record_id": "flaws_cloudtrail:0000319:f2bc6e31-f4d7-4a1f-a161-9760dbf69cdc", "row_index": 319, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2bc6e31-f4d7-4a1f-a161-9760dbf69cdc", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcfccc4f-92af-49f4-b71d-6c2c74d563d7", "record_id": "flaws_cloudtrail:0000320:dcfccc4f-92af-49f4-b71d-6c2c74d563d7", "row_index": 320, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcfccc4f-92af-49f4-b71d-6c2c74d563d7", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52077f9b-f64a-4148-99cd-b80ebcb5982e", "record_id": "flaws_cloudtrail:0000321:52077f9b-f64a-4148-99cd-b80ebcb5982e", "row_index": 321, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52077f9b-f64a-4148-99cd-b80ebcb5982e", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9178ed48-2c1e-4fa7-82a9-36464f6", "record_id": "flaws_cloudtrail:0000322:9178ed48-2c1e-4fa7-82a9-36464f6", "row_index": 322, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9178ed48-2c1e-4fa7-82a9-36464f6", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1e5ef39-c7d6-449e-aa8a-caea24f92b31", "record_id": "flaws_cloudtrail:0000323:e1e5ef39-c7d6-449e-aa8a-caea24f92b31", "row_index": 323, "timestamp": "2019-07-12T11:32:45Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1e5ef39-c7d6-449e-aa8a-caea24f92b31", "eventTime": "2019-07-12T11:32:45Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e73427d-5457-42c3-83d9-a6faa1ef663a", "record_id": "flaws_cloudtrail:0000324:e73427d-5457-42c3-83d9-a6faa1ef663a", "row_index": 324, "timestamp": "2019-07-12T11:32:46Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e73427d-5457-42c3-83d9-a6faa1ef663a", "eventTime": "2019-07-12T11:32:46Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e73427d-5457-42c3-83d9-a6faa1ef663a", "record_id": "flaws_cloudtrail:0000325:e73427d-5457-42c3-83d9-a6faa1ef663a", "row_index": 325, "timestamp": "2019-07-12T11:32:46Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e73427d-5457-42c3-83d9-a6faa1ef663a", "eventTime": "2019-07-12T11:32:46Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e659276-2237-4a99-907a-930e5327fcf3", "record_id": "flaws_cloudtrail:0000326:b9e659276-2237-4a99-907a-930e5327fcf3", "row_index": 326, "timestamp": "2019-07-12T11:32:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e659276-2237-4a99-907a-930e5327fcf3", "eventTime": "2019-07-12T11:32:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c160f1f4-730f-4c6d-8f31-44724d61a", "record_id": "flaws_cloudtrail:0000327:c160f1f4-730f-4c6d-8f31-44724d61a", "row_index": 327, "timestamp": "2019-07-12T11:32:54Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c160f1f4-730f-4c6d-8f31-44724d61a", "eventTime": "2019-07-12T11:32:54Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9e659276-2237-4a99-907a-930e5327fcf3", "record_id": "flaws_cloudtrail:0000328:b9e659276-2237-4a99-907a-930e5327fcf3", "row_index": 328, "timestamp": "2019-07-12T11:32:54Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9e659276-2237-4a99-907a-930e5327fcf3", "eventTime": "2019-07-12T11:32:54Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c160f1f4-730f-4c6d-8f31-44724d61a", "record_id": "flaws_cloudtrail:0000329:c160f1f4-730f-4c6d-8f31-44724d61a", "row_index": 329, "timestamp": "2019-07-12T11:32:54Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c160f1f4-730f-4c6d-8f31-44724d61a", "eventTime": "2019-07-12T11:32:54Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81568d2-07a9-4dd3-aee5-0d962f375c3b", "record_id": "flaws_cloudtrail:0000330:81568d2-07a9-4dd3-aee5-0d962f375c3b", "row_index": 330, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81568d2-07a9-4dd3-aee5-0d962f375c3b", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "995af56b-6f6c-4aa8-8860-81dc52a7dc07", "record_id": "flaws_cloudtrail:0000331:995af56b-6f6c-4aa8-8860-81dc52a7dc07", "row_index": 331, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "995af56b-6f6c-4aa8-8860-81dc52a7dc07", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73b8991a-303f-4bf2-9edf-5157fc5fac8a", "record_id": "flaws_cloudtrail:0000332:73b8991a-303f-4bf2-9edf-5157fc5fac8a", "row_index": 332, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73b8991a-303f-4bf2-9edf-5157fc5fac8a", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9102d826-dc82-4433-b912-5061b552950a", "record_id": "flaws_cloudtrail:0000333:9102d826-dc82-4433-b912-5061b552950a", "row_index": 333, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9102d826-dc82-4433-b912-5061b552950a", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f87687a-9486-4ee2-98e1-f06bc59fb7c5", "record_id": "flaws_cloudtrail:0000334:f87687a-9486-4ee2-98e1-f06bc59fb7c5", "row_index": 334, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f87687a-9486-4ee2-98e1-f06bc59fb7c5", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5508bdd0-e098-493e-a4c6-9b4287f3f124", "record_id": "flaws_cloudtrail:0000335:5508bdd0-e098-493e-a4c6-9b4287f3f124", "row_index": 335, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5508bdd0-e098-493e-a4c6-9b4287f3f124", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17f411606-6331-4b50-b624-65df71e2e1ea", "record_id": "flaws_cloudtrail:0000336:17f411606-6331-4b50-b624-65df71e2e1ea", "row_index": 336, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17f411606-6331-4b50-b624-65df71e2e1ea", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1faa919-fe7b-4a55-8e4d-f091e8a35897", "record_id": "flaws_cloudtrail:0000337:e1faa919-fe7b-4a55-8e4d-f091e8a35897", "row_index": 337, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1faa919-fe7b-4a55-8e4d-f091e8a35897", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a026c4e4-5890-42f9-bae8-d5bf59594c3", "record_id": "flaws_cloudtrail:0000338:a026c4e4-5890-42f9-bae8-d5bf59594c3", "row_index": 338, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a026c4e4-5890-42f9-bae8-d5bf59594c3", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e64bb0-8304-445a-9921-6eec869b8211", "record_id": "flaws_cloudtrail:0000339:38e64bb0-8304-445a-9921-6eec869b8211", "row_index": 339, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e64bb0-8304-445a-9921-6eec869b8211", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e92543-29e2-4fbd-b087-a8bb4cbce981", "record_id": "flaws_cloudtrail:0000340:e92543-29e2-4fbd-b087-a8bb4cbce981", "row_index": 340, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e92543-29e2-4fbd-b087-a8bb4cbce981", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f029a26d-d240-4cf1-ba4d-5a1d236ae45a", "record_id": "flaws_cloudtrail:0000341:f029a26d-d240-4cf1-ba4d-5a1d236ae45a", "row_index": 341, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f029a26d-d240-4cf1-ba4d-5a1d236ae45a", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81568d2-07a9-4dd3-aee5-0d962f375c3b", "record_id": "flaws_cloudtrail:0000342:81568d2-07a9-4dd3-aee5-0d962f375c3b", "row_index": 342, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81568d2-07a9-4dd3-aee5-0d962f375c3b", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "995af56b-6f6c-4aa8-8860-81dc52a7dc07", "record_id": "flaws_cloudtrail:0000343:995af56b-6f6c-4aa8-8860-81dc52a7dc07", "row_index": 343, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "995af56b-6f6c-4aa8-8860-81dc52a7dc07", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73b8991a-303f-4bf2-9edf-5157fc5fac8a", "record_id": "flaws_cloudtrail:0000344:73b8991a-303f-4bf2-9edf-5157fc5fac8a", "row_index": 344, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73b8991a-303f-4bf2-9edf-5157fc5fac8a", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9102d826-dc82-4433-b912-5061b552950a", "record_id": "flaws_cloudtrail:0000345:9102d826-dc82-4433-b912-5061b552950a", "row_index": 345, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9102d826-dc82-4433-b912-5061b552950a", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f87687a-9486-4ee2-98e1-f06bc59fb7c5", "record_id": "flaws_cloudtrail:0000346:f87687a-9486-4ee2-98e1-f06bc59fb7c5", "row_index": 346, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f87687a-9486-4ee2-98e1-f06bc59fb7c5", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5508bdd0-e098-493e-a4c6-9b4287f3f124", "record_id": "flaws_cloudtrail:0000347:5508bdd0-e098-493e-a4c6-9b4287f3f124", "row_index": 347, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5508bdd0-e098-493e-a4c6-9b4287f3f124", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17f411606-6331-4b50-b624-65df71e2e1ea", "record_id": "flaws_cloudtrail:0000348:17f411606-6331-4b50-b624-65df71e2e1ea", "row_index": 348, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17f411606-6331-4b50-b624-65df71e2e1ea", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1faa919-fe7b-4a55-8e4d-f091e8a35897", "record_id": "flaws_cloudtrail:0000349:e1faa919-fe7b-4a55-8e4d-f091e8a35897", "row_index": 349, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1faa919-fe7b-4a55-8e4d-f091e8a35897", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a026c4e4-5890-42f9-bae8-d5bf59594c3", "record_id": "flaws_cloudtrail:0000350:a026c4e4-5890-42f9-bae8-d5bf59594c3", "row_index": 350, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a026c4e4-5890-42f9-bae8-d5bf59594c3", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38e64bb0-8304-445a-9921-6eec869b8211", "record_id": "flaws_cloudtrail:0000351:38e64bb0-8304-445a-9921-6eec869b8211", "row_index": 351, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38e64bb0-8304-445a-9921-6eec869b8211", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e92543-29e2-4fbd-b087-a8bb4cbce981", "record_id": "flaws_cloudtrail:0000352:e92543-29e2-4fbd-b087-a8bb4cbce981", "row_index": 352, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e92543-29e2-4fbd-b087-a8bb4cbce981", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f029a26d-d240-4cf1-ba4d-5a1d236ae45a", "record_id": "flaws_cloudtrail:0000353:f029a26d-d240-4cf1-ba4d-5a1d236ae45a", "row_index": 353, "timestamp": "2019-07-12T11:32:55Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f029a26d-d240-4cf1-ba4d-5a1d236ae45a", "eventTime": "2019-07-12T11:32:55Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5284bcc-0be9-4b13-bf3f-8effb1c18ef7", "record_id": "flaws_cloudtrail:0000354:a5284bcc-0be9-4b13-bf3f-8effb1c18ef7", "row_index": 354, "timestamp": "2019-07-12T11:34:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-cli/1.16.190 Python/3.7.3 Darwin/18.6.0 botocore/1.12.180]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5284bcc-0be9-4b13-bf3f-8effb1c18ef7", "eventTime": "2019-07-12T11:34:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-cli/1.16.190 Python/3.7.3 Darwin/18.6.0 botocore/1.12.180]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5284bcc-0be9-4b13-bf3f-8effb1c18ef7", "record_id": "flaws_cloudtrail:0000355:a5284bcc-0be9-4b13-bf3f-8effb1c18ef7", "row_index": 355, "timestamp": "2019-07-12T11:34:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-cli/1.16.190 Python/3.7.3 Darwin/18.6.0 botocore/1.12.180]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5284bcc-0be9-4b13-bf3f-8effb1c18ef7", "eventTime": "2019-07-12T11:34:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-cli/1.16.190 Python/3.7.3 Darwin/18.6.0 botocore/1.12.180]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248400e9f-5d5b-4217-ba68-4b35c69e9a71", "record_id": "flaws_cloudtrail:0000356:248400e9f-5d5b-4217-ba68-4b35c69e9a71", "row_index": 356, "timestamp": "2019-07-12T12:00:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248400e9f-5d5b-4217-ba68-4b35c69e9a71", "eventTime": "2019-07-12T12:00:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85085cf-ea8b-4613-8fb3-9949fcfef1aa", "record_id": "flaws_cloudtrail:0000357:85085cf-ea8b-4613-8fb3-9949fcfef1aa", "row_index": 357, "timestamp": "2019-07-12T12:00:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85085cf-ea8b-4613-8fb3-9949fcfef1aa", "eventTime": "2019-07-12T12:00:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "248400e9f-5d5b-4217-ba68-4b35c69e9a71", "record_id": "flaws_cloudtrail:0000358:248400e9f-5d5b-4217-ba68-4b35c69e9a71", "row_index": 358, "timestamp": "2019-07-12T12:00:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "248400e9f-5d5b-4217-ba68-4b35c69e9a71", "eventTime": "2019-07-12T12:00:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85085cf-ea8b-4613-8fb3-9949fcfef1aa", "record_id": "flaws_cloudtrail:0000359:85085cf-ea8b-4613-8fb3-9949fcfef1aa", "row_index": 359, "timestamp": "2019-07-12T12:00:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85085cf-ea8b-4613-8fb3-9949fcfef1aa", "eventTime": "2019-07-12T12:00:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28cd7c50-62cd-480b-b19e-16d79af415fa", "record_id": "flaws_cloudtrail:0000360:28cd7c50-62cd-480b-b19e-16d79af415fa", "row_index": 360, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28cd7c50-62cd-480b-b19e-16d79af415fa", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fd0521d-5796-42b3-abdf-5a374643a671", "record_id": "flaws_cloudtrail:0000361:9fd0521d-5796-42b3-abdf-5a374643a671", "row_index": 361, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fd0521d-5796-42b3-abdf-5a374643a671", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d22d33-dc4f-4992-aa94-935c3d27489", "record_id": "flaws_cloudtrail:0000362:16d22d33-dc4f-4992-aa94-935c3d27489", "row_index": 362, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d22d33-dc4f-4992-aa94-935c3d27489", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4f54273-d040-49a6-b245-709fd784ae41", "record_id": "flaws_cloudtrail:0000363:d4f54273-d040-49a6-b245-709fd784ae41", "row_index": 363, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4f54273-d040-49a6-b245-709fd784ae41", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd87502-53aa-4474-8906-2b7959d47714", "record_id": "flaws_cloudtrail:0000364:fd87502-53aa-4474-8906-2b7959d47714", "row_index": 364, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd87502-53aa-4474-8906-2b7959d47714", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "911ec39e-4ad2-48a8-9ec8-98794fb2c9", "record_id": "flaws_cloudtrail:0000365:911ec39e-4ad2-48a8-9ec8-98794fb2c9", "row_index": 365, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "911ec39e-4ad2-48a8-9ec8-98794fb2c9", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "938031d5-1ae6-412a-973d-d05196c62dc7", "record_id": "flaws_cloudtrail:0000366:938031d5-1ae6-412a-973d-d05196c62dc7", "row_index": 366, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "938031d5-1ae6-412a-973d-d05196c62dc7", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "049102-8aa4-4fa5-acef-06ba6a93b06d", "record_id": "flaws_cloudtrail:0000367:049102-8aa4-4fa5-acef-06ba6a93b06d", "row_index": 367, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "049102-8aa4-4fa5-acef-06ba6a93b06d", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0535fdd2-609f-4bd9-abcd-e322e4cb4092", "record_id": "flaws_cloudtrail:0000368:0535fdd2-609f-4bd9-abcd-e322e4cb4092", "row_index": 368, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0535fdd2-609f-4bd9-abcd-e322e4cb4092", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28cd7c50-62cd-480b-b19e-16d79af415fa", "record_id": "flaws_cloudtrail:0000369:28cd7c50-62cd-480b-b19e-16d79af415fa", "row_index": 369, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 894, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28cd7c50-62cd-480b-b19e-16d79af415fa", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fd0521d-5796-42b3-abdf-5a374643a671", "record_id": "flaws_cloudtrail:0000370:9fd0521d-5796-42b3-abdf-5a374643a671", "row_index": 370, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fd0521d-5796-42b3-abdf-5a374643a671", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16d22d33-dc4f-4992-aa94-935c3d27489", "record_id": "flaws_cloudtrail:0000371:16d22d33-dc4f-4992-aa94-935c3d27489", "row_index": 371, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16d22d33-dc4f-4992-aa94-935c3d27489", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4f54273-d040-49a6-b245-709fd784ae41", "record_id": "flaws_cloudtrail:0000372:d4f54273-d040-49a6-b245-709fd784ae41", "row_index": 372, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4f54273-d040-49a6-b245-709fd784ae41", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd87502-53aa-4474-8906-2b7959d47714", "record_id": "flaws_cloudtrail:0000373:fd87502-53aa-4474-8906-2b7959d47714", "row_index": 373, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 892, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd87502-53aa-4474-8906-2b7959d47714", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "911ec39e-4ad2-48a8-9ec8-98794fb2c9", "record_id": "flaws_cloudtrail:0000374:911ec39e-4ad2-48a8-9ec8-98794fb2c9", "row_index": 374, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "911ec39e-4ad2-48a8-9ec8-98794fb2c9", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "938031d5-1ae6-412a-973d-d05196c62dc7", "record_id": "flaws_cloudtrail:0000375:938031d5-1ae6-412a-973d-d05196c62dc7", "row_index": 375, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 893, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "938031d5-1ae6-412a-973d-d05196c62dc7", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "049102-8aa4-4fa5-acef-06ba6a93b06d", "record_id": "flaws_cloudtrail:0000376:049102-8aa4-4fa5-acef-06ba6a93b06d", "row_index": 376, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "049102-8aa4-4fa5-acef-06ba6a93b06d", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0535fdd2-609f-4bd9-abcd-e322e4cb4092", "record_id": "flaws_cloudtrail:0000377:0535fdd2-609f-4bd9-abcd-e322e4cb4092", "row_index": 377, "timestamp": "2019-07-12T12:00:28Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 865, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0535fdd2-609f-4bd9-abcd-e322e4cb4092", "eventTime": "2019-07-12T12:00:28Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.ap-northeast-1.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dce99ed3-477a-4bf6-b9c9-008959f04db82", "record_id": "flaws_cloudtrail:0000378:dce99ed3-477a-4bf6-b9c9-008959f04db82", "row_index": 378, "timestamp": "2019-07-12T12:00:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dce99ed3-477a-4bf6-b9c9-008959f04db82", "eventTime": "2019-07-12T12:00:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dce99ed3-477a-4bf6-b9c9-008959f04db82", "record_id": "flaws_cloudtrail:0000379:dce99ed3-477a-4bf6-b9c9-008959f04db82", "row_index": 379, "timestamp": "2019-07-12T12:00:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dce99ed3-477a-4bf6-b9c9-008959f04db82", "eventTime": "2019-07-12T12:00:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18e73f3b-0fcc-43b1-a168-23dae3e683d9", "record_id": "flaws_cloudtrail:0000380:18e73f3b-0fcc-43b1-a168-23dae3e683d9", "row_index": 380, "timestamp": "2019-07-12T12:01:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18e73f3b-0fcc-43b1-a168-23dae3e683d9", "eventTime": "2019-07-12T12:01:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18e73f3b-0fcc-43b1-a168-23dae3e683d9", "record_id": "flaws_cloudtrail:0000381:18e73f3b-0fcc-43b1-a168-23dae3e683d9", "row_index": 381, "timestamp": "2019-07-12T12:01:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18e73f3b-0fcc-43b1-a168-23dae3e683d9", "eventTime": "2019-07-12T12:01:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a619dcc1-b327-4b91-a5b0-c9c30165", "record_id": "flaws_cloudtrail:0000382:a619dcc1-b327-4b91-a5b0-c9c30165", "row_index": 382, "timestamp": "2019-07-12T12:02:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a619dcc1-b327-4b91-a5b0-c9c30165", "eventTime": "2019-07-12T12:02:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a619dcc1-b327-4b91-a5b0-c9c30165", "record_id": "flaws_cloudtrail:0000383:a619dcc1-b327-4b91-a5b0-c9c30165", "row_index": 383, "timestamp": "2019-07-12T12:02:09Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a619dcc1-b327-4b91-a5b0-c9c30165", "eventTime": "2019-07-12T12:02:09Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28c80d5d-2163-476b-8301-cb88c3e81868", "record_id": "flaws_cloudtrail:0000384:28c80d5d-2163-476b-8301-cb88c3e81868", "row_index": 384, "timestamp": "2019-07-12T12:02:11Z", "event_type": "ImportKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28c80d5d-2163-476b-8301-cb88c3e81868", "eventTime": "2019-07-12T12:02:11Z", "eventName": "ImportKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "test", "publicKeyMaterial": "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"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28c80d5d-2163-476b-8301-cb88c3e81868", "record_id": "flaws_cloudtrail:0000385:28c80d5d-2163-476b-8301-cb88c3e81868", "row_index": 385, "timestamp": "2019-07-12T12:02:11Z", "event_type": "ImportKeyPair", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1764, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28c80d5d-2163-476b-8301-cb88c3e81868", "eventTime": "2019-07-12T12:02:11Z", "eventName": "ImportKeyPair", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keyName": "test", "publicKeyMaterial": "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"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85c12527-8020-487f-81b6-28393c53edaf", "record_id": "flaws_cloudtrail:0000386:85c12527-8020-487f-81b6-28393c53edaf", "row_index": 386, "timestamp": "2019-07-12T12:05:20Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85c12527-8020-487f-81b6-28393c53edaf", "eventTime": "2019-07-12T12:05:20Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edad010a-9692-4cbc-9a3f-d384d389f15e", "record_id": "flaws_cloudtrail:0000387:edad010a-9692-4cbc-9a3f-d384d389f15e", "row_index": 387, "timestamp": "2019-07-12T12:05:20Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edad010a-9692-4cbc-9a3f-d384d389f15e", "eventTime": "2019-07-12T12:05:20Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72b3b020-eee1-48d4-9655-2cf3a8f0efdc", "record_id": "flaws_cloudtrail:0000388:72b3b020-eee1-48d4-9655-2cf3a8f0efdc", "row_index": 388, "timestamp": "2019-07-12T12:05:20Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72b3b020-eee1-48d4-9655-2cf3a8f0efdc", "eventTime": "2019-07-12T12:05:20Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed292fd5-651d-40e3-acc1-f682ef69175", "record_id": "flaws_cloudtrail:0000389:ed292fd5-651d-40e3-acc1-f682ef69175", "row_index": 389, "timestamp": "2019-07-12T12:05:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed292fd5-651d-40e3-acc1-f682ef69175", "eventTime": "2019-07-12T12:05:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85c12527-8020-487f-81b6-28393c53edaf", "record_id": "flaws_cloudtrail:0000390:85c12527-8020-487f-81b6-28393c53edaf", "row_index": 390, "timestamp": "2019-07-12T12:05:20Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85c12527-8020-487f-81b6-28393c53edaf", "eventTime": "2019-07-12T12:05:20Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAttachedUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edad010a-9692-4cbc-9a3f-d384d389f15e", "record_id": "flaws_cloudtrail:0000391:edad010a-9692-4cbc-9a3f-d384d389f15e", "row_index": 391, "timestamp": "2019-07-12T12:05:20Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edad010a-9692-4cbc-9a3f-d384d389f15e", "eventTime": "2019-07-12T12:05:20Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUserPolicies on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72b3b020-eee1-48d4-9655-2cf3a8f0efdc", "record_id": "flaws_cloudtrail:0000392:72b3b020-eee1-48d4-9655-2cf3a8f0efdc", "row_index": 392, "timestamp": "2019-07-12T12:05:20Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72b3b020-eee1-48d4-9655-2cf3a8f0efdc", "eventTime": "2019-07-12T12:05:20Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListGroupsForUser on resource: user backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed292fd5-651d-40e3-acc1-f682ef69175", "record_id": "flaws_cloudtrail:0000393:ed292fd5-651d-40e3-acc1-f682ef69175", "row_index": 393, "timestamp": "2019-07-12T12:05:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed292fd5-651d-40e3-acc1-f682ef69175", "eventTime": "2019-07-12T12:05:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee462945-b05a-403a-8807-0db8c30fc6bb", "record_id": "flaws_cloudtrail:0000394:ee462945-b05a-403a-8807-0db8c30fc6bb", "row_index": 394, "timestamp": "2019-07-12T12:08:42Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee462945-b05a-403a-8807-0db8c30fc6bb", "eventTime": "2019-07-12T12:08:42Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "486ae28e-d241-4c0c-b176-855676dc5d65c", "record_id": "flaws_cloudtrail:0000395:486ae28e-d241-4c0c-b176-855676dc5d65c", "row_index": 395, "timestamp": "2019-07-12T12:08:42Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "486ae28e-d241-4c0c-b176-855676dc5d65c", "eventTime": "2019-07-12T12:08:42Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb47a2eb-fb9f-4089-b324-29cd38d738d4", "record_id": "flaws_cloudtrail:0000396:bb47a2eb-fb9f-4089-b324-29cd38d738d4", "row_index": 396, "timestamp": "2019-07-12T12:08:42Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb47a2eb-fb9f-4089-b324-29cd38d738d4", "eventTime": "2019-07-12T12:08:42Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fdb12a0-99be-4868-98e7-87f9ccf4da9c", "record_id": "flaws_cloudtrail:0000397:4fdb12a0-99be-4868-98e7-87f9ccf4da9c", "row_index": 397, "timestamp": "2019-07-12T12:08:42Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fdb12a0-99be-4868-98e7-87f9ccf4da9c", "eventTime": "2019-07-12T12:08:42Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee462945-b05a-403a-8807-0db8c30fc6bb", "record_id": "flaws_cloudtrail:0000398:ee462945-b05a-403a-8807-0db8c30fc6bb", "row_index": 398, "timestamp": "2019-07-12T12:08:42Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee462945-b05a-403a-8807-0db8c30fc6bb", "eventTime": "2019-07-12T12:08:42Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "486ae28e-d241-4c0c-b176-855676dc5d65c", "record_id": "flaws_cloudtrail:0000399:486ae28e-d241-4c0c-b176-855676dc5d65c", "row_index": 399, "timestamp": "2019-07-12T12:08:42Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "486ae28e-d241-4c0c-b176-855676dc5d65c", "eventTime": "2019-07-12T12:08:42Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb47a2eb-fb9f-4089-b324-29cd38d738d4", "record_id": "flaws_cloudtrail:0000400:bb47a2eb-fb9f-4089-b324-29cd38d738d4", "row_index": 400, "timestamp": "2019-07-12T12:08:42Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb47a2eb-fb9f-4089-b324-29cd38d738d4", "eventTime": "2019-07-12T12:08:42Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fdb12a0-99be-4868-98e7-87f9ccf4da9c", "record_id": "flaws_cloudtrail:0000401:4fdb12a0-99be-4868-98e7-87f9ccf4da9c", "row_index": 401, "timestamp": "2019-07-12T12:08:42Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fdb12a0-99be-4868-98e7-87f9ccf4da9c", "eventTime": "2019-07-12T12:08:42Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b995b69-b331-4dc2-84f9-795014bf21580", "record_id": "flaws_cloudtrail:0000402:8b995b69-b331-4dc2-84f9-795014bf21580", "row_index": 402, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b995b69-b331-4dc2-84f9-795014bf21580", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f7fde71-8ffd-46d1-aef1-cbb0a2b36012", "record_id": "flaws_cloudtrail:0000403:9f7fde71-8ffd-46d1-aef1-cbb0a2b36012", "row_index": 403, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f7fde71-8ffd-46d1-aef1-cbb0a2b36012", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b377b54c-dd1c-4b6c-9d73-c158fbbef205", "record_id": "flaws_cloudtrail:0000404:b377b54c-dd1c-4b6c-9d73-c158fbbef205", "row_index": 404, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b377b54c-dd1c-4b6c-9d73-c158fbbef205", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7554bbf2-778f-42c0-bfde-8e382e990033", "record_id": "flaws_cloudtrail:0000405:7554bbf2-778f-42c0-bfde-8e382e990033", "row_index": 405, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7554bbf2-778f-42c0-bfde-8e382e990033", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe07a004-1ff6-4a9b-86d2-52b1dcbda972", "record_id": "flaws_cloudtrail:0000406:fe07a004-1ff6-4a9b-86d2-52b1dcbda972", "row_index": 406, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe07a004-1ff6-4a9b-86d2-52b1dcbda972", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3661d25-867b-47f8-ac4d-48ead5559f24", "record_id": "flaws_cloudtrail:0000407:a3661d25-867b-47f8-ac4d-48ead5559f24", "row_index": 407, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3661d25-867b-47f8-ac4d-48ead5559f24", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e42a7cb-5072-4ee9-9f98-e93aeb9ad7eb", "record_id": "flaws_cloudtrail:0000408:3e42a7cb-5072-4ee9-9f98-e93aeb9ad7eb", "row_index": 408, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e42a7cb-5072-4ee9-9f98-e93aeb9ad7eb", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f99f7f5c-f21e-4e63-bf35-594fe77c0541", "record_id": "flaws_cloudtrail:0000409:f99f7f5c-f21e-4e63-bf35-594fe77c0541", "row_index": 409, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f99f7f5c-f21e-4e63-bf35-594fe77c0541", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54d5d361-940f-4288-99df-7a679473cbfc", "record_id": "flaws_cloudtrail:0000410:54d5d361-940f-4288-99df-7a679473cbfc", "row_index": 410, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54d5d361-940f-4288-99df-7a679473cbfc", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b58d848-3764-4846-95d7-6138e61787f8", "record_id": "flaws_cloudtrail:0000411:3b58d848-3764-4846-95d7-6138e61787f8", "row_index": 411, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b58d848-3764-4846-95d7-6138e61787f8", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b995b69-b331-4dc2-84f9-795014bf21580", "record_id": "flaws_cloudtrail:0000412:8b995b69-b331-4dc2-84f9-795014bf21580", "row_index": 412, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b995b69-b331-4dc2-84f9-795014bf21580", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f7fde71-8ffd-46d1-aef1-cbb0a2b36012", "record_id": "flaws_cloudtrail:0000413:9f7fde71-8ffd-46d1-aef1-cbb0a2b36012", "row_index": 413, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f7fde71-8ffd-46d1-aef1-cbb0a2b36012", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b377b54c-dd1c-4b6c-9d73-c158fbbef205", "record_id": "flaws_cloudtrail:0000414:b377b54c-dd1c-4b6c-9d73-c158fbbef205", "row_index": 414, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b377b54c-dd1c-4b6c-9d73-c158fbbef205", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7554bbf2-778f-42c0-bfde-8e382e990033", "record_id": "flaws_cloudtrail:0000415:7554bbf2-778f-42c0-bfde-8e382e990033", "row_index": 415, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7554bbf2-778f-42c0-bfde-8e382e990033", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe07a004-1ff6-4a9b-86d2-52b1dcbda972", "record_id": "flaws_cloudtrail:0000416:fe07a004-1ff6-4a9b-86d2-52b1dcbda972", "row_index": 416, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe07a004-1ff6-4a9b-86d2-52b1dcbda972", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3661d25-867b-47f8-ac4d-48ead5559f24", "record_id": "flaws_cloudtrail:0000417:a3661d25-867b-47f8-ac4d-48ead5559f24", "row_index": 417, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3661d25-867b-47f8-ac4d-48ead5559f24", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e42a7cb-5072-4ee9-9f98-e93aeb9ad7eb", "record_id": "flaws_cloudtrail:0000418:3e42a7cb-5072-4ee9-9f98-e93aeb9ad7eb", "row_index": 418, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e42a7cb-5072-4ee9-9f98-e93aeb9ad7eb", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f99f7f5c-f21e-4e63-bf35-594fe77c0541", "record_id": "flaws_cloudtrail:0000419:f99f7f5c-f21e-4e63-bf35-594fe77c0541", "row_index": 419, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f99f7f5c-f21e-4e63-bf35-594fe77c0541", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54d5d361-940f-4288-99df-7a679473cbfc", "record_id": "flaws_cloudtrail:0000420:54d5d361-940f-4288-99df-7a679473cbfc", "row_index": 420, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54d5d361-940f-4288-99df-7a679473cbfc", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b58d848-3764-4846-95d7-6138e61787f8", "record_id": "flaws_cloudtrail:0000421:3b58d848-3764-4846-95d7-6138e61787f8", "row_index": 421, "timestamp": "2019-07-12T12:08:43Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b58d848-3764-4846-95d7-6138e61787f8", "eventTime": "2019-07-12T12:08:43Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f7fbddb-449f-4645-9f17-92e5b9aca093", "record_id": "flaws_cloudtrail:0000422:1f7fbddb-449f-4645-9f17-92e5b9aca093", "row_index": 422, "timestamp": "2019-07-12T12:08:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-cli/1.16.190 Python/3.7.3 Darwin/18.6.0 botocore/1.12.180]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f7fbddb-449f-4645-9f17-92e5b9aca093", "eventTime": "2019-07-12T12:08:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-cli/1.16.190 Python/3.7.3 Darwin/18.6.0 botocore/1.12.180]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f7fbddb-449f-4645-9f17-92e5b9aca093", "record_id": "flaws_cloudtrail:0000423:1f7fbddb-449f-4645-9f17-92e5b9aca093", "row_index": 423, "timestamp": "2019-07-12T12:08:55Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-cli/1.16.190 Python/3.7.3 Darwin/18.6.0 botocore/1.12.180]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f7fbddb-449f-4645-9f17-92e5b9aca093", "eventTime": "2019-07-12T12:08:55Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-cli/1.16.190 Python/3.7.3 Darwin/18.6.0 botocore/1.12.180]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8564d807-e756-4567-b5bd-0679d640b466", "record_id": "flaws_cloudtrail:0000424:8564d807-e756-4567-b5bd-0679d640b466", "row_index": 424, "timestamp": "2019-07-12T12:16:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8564d807-e756-4567-b5bd-0679d640b466", "eventTime": "2019-07-12T12:16:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8564d807-e756-4567-b5bd-0679d640b466", "record_id": "flaws_cloudtrail:0000425:8564d807-e756-4567-b5bd-0679d640b466", "row_index": 425, "timestamp": "2019-07-12T12:16:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8564d807-e756-4567-b5bd-0679d640b466", "eventTime": "2019-07-12T12:16:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b370c8f-f4ca-405d-80d6-1eff27868", "record_id": "flaws_cloudtrail:0000426:5b370c8f-f4ca-405d-80d6-1eff27868", "row_index": 426, "timestamp": "2019-07-12T12:17:01Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b370c8f-f4ca-405d-80d6-1eff27868", "eventTime": "2019-07-12T12:17:01Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountAuthorizationDetails on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26cc2e22-714b-4b54-8fb9-27d321c5aba5", "record_id": "flaws_cloudtrail:0000427:26cc2e22-714b-4b54-8fb9-27d321c5aba5", "row_index": 427, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26cc2e22-714b-4b54-8fb9-27d321c5aba5", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "badf4bcc-10ff-4a54-8f64-f8bfd098bda2", "record_id": "flaws_cloudtrail:0000428:badf4bcc-10ff-4a54-8f64-f8bfd098bda2", "row_index": 428, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "badf4bcc-10ff-4a54-8f64-f8bfd098bda2", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf69f341-36c8-44a7-8de2-a9dfad8f6649", "record_id": "flaws_cloudtrail:0000429:bf69f341-36c8-44a7-8de2-a9dfad8f6649", "row_index": 429, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf69f341-36c8-44a7-8de2-a9dfad8f6649", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: route53:ListHostedZones", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29b365f5-6db9-4a7f-9353-ffb3c7b2b392", "record_id": "flaws_cloudtrail:0000430:29b365f5-6db9-4a7f-9353-ffb3c7b2b392", "row_index": 430, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29b365f5-6db9-4a7f-9353-ffb3c7b2b392", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListInstanceProfiles on resource: arn:aws:iam::811596193553:instance-profile/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78151d80-fd75-4a3e-a184-f63f9455f91a", "record_id": "flaws_cloudtrail:0000431:78151d80-fd75-4a3e-a184-f63f9455f91a", "row_index": 431, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78151d80-fd75-4a3e-a184-f63f9455f91a", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListVirtualMFADevices on resource: arn:aws:iam::811596193553:mfa/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d37053-9b0b-40dc-8527-fb25d9e0f2c4", "record_id": "flaws_cloudtrail:0000432:4d37053-9b0b-40dc-8527-fb25d9e0f2c4", "row_index": 432, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListDistributions2017_03_25", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d37053-9b0b-40dc-8527-fb25d9e0f2c4", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListDistributions2017_03_25", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudfront:ListDistributions", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c4909b-123e-473e-b2c4-4335fb00952", "record_id": "flaws_cloudtrail:0000433:f5c4909b-123e-473e-b2c4-4335fb00952", "row_index": 433, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c4909b-123e-473e-b2c4-4335fb00952", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c08bed2-ed11-4829-9e30-8a946696f12d2", "record_id": "flaws_cloudtrail:0000434:6c08bed2-ed11-4829-9e30-8a946696f12d2", "row_index": 434, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeLaunchConfigurations", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c08bed2-ed11-4829-9e30-8a946696f12d2", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeLaunchConfigurations", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribeLaunchConfigurations", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa801474-f566-41c2-b41a-c97f0c6ea1ab", "record_id": "flaws_cloudtrail:0000435:aa801474-f566-41c2-b41a-c97f0c6ea1ab", "row_index": 435, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa801474-f566-41c2-b41a-c97f0c6ea1ab", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a921aa3e-62ec-4349-a581-bade8b8c7a01", "record_id": "flaws_cloudtrail:0000436:a921aa3e-62ec-4349-a581-bade8b8c7a01", "row_index": 436, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a921aa3e-62ec-4349-a581-bade8b8c7a01", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58e9fa6c-7793-4104-b39a-5b0e948a3790", "record_id": "flaws_cloudtrail:0000437:58e9fa6c-7793-4104-b39a-5b0e948a3790", "row_index": 437, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58e9fa6c-7793-4104-b39a-5b0e948a3790", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e191da62-2987-4955-a368-c36aec90e00f", "record_id": "flaws_cloudtrail:0000438:e191da62-2987-4955-a368-c36aec90e00f", "row_index": 438, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e191da62-2987-4955-a368-c36aec90e00f", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b968949-d19b-4399-9874-3684e0ed1ea9", "record_id": "flaws_cloudtrail:0000439:b968949-d19b-4399-9874-3684e0ed1ea9", "row_index": 439, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b968949-d19b-4399-9874-3684e0ed1ea9", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}, "availabilityZoneIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30348-340b-4d2e-9eac-89b7cbd357f9", "record_id": "flaws_cloudtrail:0000440:30348-340b-4d2e-9eac-89b7cbd357f9", "row_index": 440, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30348-340b-4d2e-9eac-89b7cbd357f9", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee66ca00-094f-4f25-9158-18666ed0be2f", "record_id": "flaws_cloudtrail:0000441:ee66ca00-094f-4f25-9158-18666ed0be2f", "row_index": 441, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee66ca00-094f-4f25-9158-18666ed0be2f", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f25476-6228-42ef-849e-8fc3b4a01913", "record_id": "flaws_cloudtrail:0000442:1f25476-6228-42ef-849e-8fc3b4a01913", "row_index": 442, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f25476-6228-42ef-849e-8fc3b4a01913", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8a8b13d-9fc3-4085-bee7-63b1b6769bdf", "record_id": "flaws_cloudtrail:0000443:b8a8b13d-9fc3-4085-bee7-63b1b6769bdf", "row_index": 443, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8a8b13d-9fc3-4085-bee7-63b1b6769bdf", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecr:DescribeRepositories on resource: arn:aws:ecr:*:*:repository/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d33cf0b-b1aa-4be8-83fd-68a48f2fb55e", "record_id": "flaws_cloudtrail:0000444:1d33cf0b-b1aa-4be8-83fd-68a48f2fb55e", "row_index": 444, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d33cf0b-b1aa-4be8-83fd-68a48f2fb55e", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14ef5e3e-f73c-4133-ba3d-a6544b91a5c7", "record_id": "flaws_cloudtrail:0000445:14ef5e3e-f73c-4133-ba3d-a6544b91a5c7", "row_index": 445, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14ef5e3e-f73c-4133-ba3d-a6544b91a5c7", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ace18498-d6a8-4814-be74-c5a64712c2", "record_id": "flaws_cloudtrail:0000446:ace18498-d6a8-4814-be74-c5a64712c2", "row_index": 446, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ace18498-d6a8-4814-be74-c5a64712c2", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5660e1a3-03ef-42ab-b09c-90073f091a6e", "record_id": "flaws_cloudtrail:0000447:5660e1a3-03ef-42ab-b09c-90073f091a6e", "row_index": 447, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5660e1a3-03ef-42ab-b09c-90073f091a6e", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: acm:ListCertificates", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16917e-5037-4624-a6f4-fc3290e410ee", "record_id": "flaws_cloudtrail:0000448:16917e-5037-4624-a6f4-fc3290e410ee", "row_index": 448, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribePolicies", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16917e-5037-4624-a6f4-fc3290e410ee", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribePolicies", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribePolicies", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8627a116-42ba-475f-8941-2c2566c25a1c", "record_id": "flaws_cloudtrail:0000449:8627a116-42ba-475f-8941-2c2566c25a1c", "row_index": 449, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListTaskDefinitions", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8627a116-42ba-475f-8941-2c2566c25a1c", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListTaskDefinitions", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecs:ListTaskDefinitions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33866ec-3b09-4cac-9c4a-d98ea0c84eae", "record_id": "flaws_cloudtrail:0000450:33866ec-3b09-4cac-9c4a-d98ea0c84eae", "row_index": 450, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33866ec-3b09-4cac-9c4a-d98ea0c84eae", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaa219718-bd18-41a0-a620-70407d4479f", "record_id": "flaws_cloudtrail:0000451:eaa219718-bd18-41a0-a620-70407d4479f", "row_index": 451, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaa219718-bd18-41a0-a620-70407d4479f", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ec8ee5-4058-4f7a-b31e-55bdc5bfdef0", "record_id": "flaws_cloudtrail:0000452:b1ec8ee5-4058-4f7a-b31e-55bdc5bfdef0", "row_index": 452, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ec8ee5-4058-4f7a-b31e-55bdc5bfdef0", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribeAutoScalingGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145552c43-d1f0-45b1-8ef9-2bd64343", "record_id": "flaws_cloudtrail:0000453:145552c43-d1f0-45b1-8ef9-2bd64343", "row_index": 453, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145552c43-d1f0-45b1-8ef9-2bd64343", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "173438-6539-4137-84fd-a4dce632f7ad", "record_id": "flaws_cloudtrail:0000454:173438-6539-4137-84fd-a4dce632f7ad", "row_index": 454, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "173438-6539-4137-84fd-a4dce632f7ad", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25e6dae6-f48f-42d6-9329-5d9c4ce5be0b", "record_id": "flaws_cloudtrail:0000455:25e6dae6-f48f-42d6-9329-5d9c4ce5be0b", "row_index": 455, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25e6dae6-f48f-42d6-9329-5d9c4ce5be0b", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5075c1c5-cc62-45cb-8d3d-7c99a71cd4e7", "record_id": "flaws_cloudtrail:0000456:5075c1c5-cc62-45cb-8d3d-7c99a71cd4e7", "row_index": 456, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5075c1c5-cc62-45cb-8d3d-7c99a71cd4e7", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ac8a27-3533-479b-9558-e3b3d8034adc", "record_id": "flaws_cloudtrail:0000457:69ac8a27-3533-479b-9558-e3b3d8034adc", "row_index": 457, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ac8a27-3533-479b-9558-e3b3d8034adc", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e3373b-a7ba-4062-ba97-28ae307367bbb", "record_id": "flaws_cloudtrail:0000458:14e3373b-a7ba-4062-ba97-28ae307367bbb", "row_index": 458, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListClusters", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e3373b-a7ba-4062-ba97-28ae307367bbb", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListClusters", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecs:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4511a8c-6806-4882-be2f-2ff5d393b1dc", "record_id": "flaws_cloudtrail:0000459:e4511a8c-6806-4882-be2f-2ff5d393b1dc", "row_index": 459, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4511a8c-6806-4882-be2f-2ff5d393b1dc", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d76c4fd-bd9d-404b-848a-4c3c53fc8dfd", "record_id": "flaws_cloudtrail:0000460:9d76c4fd-bd9d-404b-848a-4c3c53fc8dfd", "row_index": 460, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d76c4fd-bd9d-404b-848a-4c3c53fc8dfd", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74a5c26e-b5e0-4246-b308-c100f24f7f1b", "record_id": "flaws_cloudtrail:0000461:74a5c26e-b5e0-4246-b308-c100f24f7f1b", "row_index": 461, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeTargetGroups", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74a5c26e-b5e0-4246-b308-c100f24f7f1b", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeTargetGroups", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeTargetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a100e6fe-c76c-49d5-863a-9a3e0888b9ea", "record_id": "flaws_cloudtrail:0000462:a100e6fe-c76c-49d5-863a-9a3e0888b9ea", "row_index": 462, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a100e6fe-c76c-49d5-863a-9a3e0888b9ea", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b370c8f-f4ca-405d-80d6-1eff27868", "record_id": "flaws_cloudtrail:0000463:5b370c8f-f4ca-405d-80d6-1eff27868", "row_index": 463, "timestamp": "2019-07-12T12:17:01Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b370c8f-f4ca-405d-80d6-1eff27868", "eventTime": "2019-07-12T12:17:01Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountAuthorizationDetails on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26cc2e22-714b-4b54-8fb9-27d321c5aba5", "record_id": "flaws_cloudtrail:0000464:26cc2e22-714b-4b54-8fb9-27d321c5aba5", "row_index": 464, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26cc2e22-714b-4b54-8fb9-27d321c5aba5", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "badf4bcc-10ff-4a54-8f64-f8bfd098bda2", "record_id": "flaws_cloudtrail:0000465:badf4bcc-10ff-4a54-8f64-f8bfd098bda2", "row_index": 465, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "badf4bcc-10ff-4a54-8f64-f8bfd098bda2", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf69f341-36c8-44a7-8de2-a9dfad8f6649", "record_id": "flaws_cloudtrail:0000466:bf69f341-36c8-44a7-8de2-a9dfad8f6649", "row_index": 466, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf69f341-36c8-44a7-8de2-a9dfad8f6649", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: route53:ListHostedZones", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29b365f5-6db9-4a7f-9353-ffb3c7b2b392", "record_id": "flaws_cloudtrail:0000467:29b365f5-6db9-4a7f-9353-ffb3c7b2b392", "row_index": 467, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListInstanceProfiles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29b365f5-6db9-4a7f-9353-ffb3c7b2b392", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListInstanceProfiles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListInstanceProfiles on resource: arn:aws:iam::811596193553:instance-profile/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78151d80-fd75-4a3e-a184-f63f9455f91a", "record_id": "flaws_cloudtrail:0000468:78151d80-fd75-4a3e-a184-f63f9455f91a", "row_index": 468, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListVirtualMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 846, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78151d80-fd75-4a3e-a184-f63f9455f91a", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListVirtualMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListVirtualMFADevices on resource: arn:aws:iam::811596193553:mfa/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d37053-9b0b-40dc-8527-fb25d9e0f2c4", "record_id": "flaws_cloudtrail:0000469:4d37053-9b0b-40dc-8527-fb25d9e0f2c4", "row_index": 469, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListDistributions2017_03_25", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d37053-9b0b-40dc-8527-fb25d9e0f2c4", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListDistributions2017_03_25", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudfront:ListDistributions", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c4909b-123e-473e-b2c4-4335fb00952", "record_id": "flaws_cloudtrail:0000470:f5c4909b-123e-473e-b2c4-4335fb00952", "row_index": 470, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c4909b-123e-473e-b2c4-4335fb00952", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c08bed2-ed11-4829-9e30-8a946696f12d2", "record_id": "flaws_cloudtrail:0000471:6c08bed2-ed11-4829-9e30-8a946696f12d2", "row_index": 471, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeLaunchConfigurations", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c08bed2-ed11-4829-9e30-8a946696f12d2", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeLaunchConfigurations", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribeLaunchConfigurations", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa801474-f566-41c2-b41a-c97f0c6ea1ab", "record_id": "flaws_cloudtrail:0000472:aa801474-f566-41c2-b41a-c97f0c6ea1ab", "row_index": 472, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa801474-f566-41c2-b41a-c97f0c6ea1ab", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a921aa3e-62ec-4349-a581-bade8b8c7a01", "record_id": "flaws_cloudtrail:0000473:a921aa3e-62ec-4349-a581-bade8b8c7a01", "row_index": 473, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a921aa3e-62ec-4349-a581-bade8b8c7a01", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58e9fa6c-7793-4104-b39a-5b0e948a3790", "record_id": "flaws_cloudtrail:0000474:58e9fa6c-7793-4104-b39a-5b0e948a3790", "row_index": 474, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58e9fa6c-7793-4104-b39a-5b0e948a3790", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e191da62-2987-4955-a368-c36aec90e00f", "record_id": "flaws_cloudtrail:0000475:e191da62-2987-4955-a368-c36aec90e00f", "row_index": 475, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e191da62-2987-4955-a368-c36aec90e00f", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b968949-d19b-4399-9874-3684e0ed1ea9", "record_id": "flaws_cloudtrail:0000476:b968949-d19b-4399-9874-3684e0ed1ea9", "row_index": 476, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b968949-d19b-4399-9874-3684e0ed1ea9", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}, "availabilityZoneIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30348-340b-4d2e-9eac-89b7cbd357f9", "record_id": "flaws_cloudtrail:0000477:30348-340b-4d2e-9eac-89b7cbd357f9", "row_index": 477, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30348-340b-4d2e-9eac-89b7cbd357f9", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee66ca00-094f-4f25-9158-18666ed0be2f", "record_id": "flaws_cloudtrail:0000478:ee66ca00-094f-4f25-9158-18666ed0be2f", "row_index": 478, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee66ca00-094f-4f25-9158-18666ed0be2f", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f25476-6228-42ef-849e-8fc3b4a01913", "record_id": "flaws_cloudtrail:0000479:1f25476-6228-42ef-849e-8fc3b4a01913", "row_index": 479, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f25476-6228-42ef-849e-8fc3b4a01913", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8a8b13d-9fc3-4085-bee7-63b1b6769bdf", "record_id": "flaws_cloudtrail:0000480:b8a8b13d-9fc3-4085-bee7-63b1b6769bdf", "row_index": 480, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 840, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8a8b13d-9fc3-4085-bee7-63b1b6769bdf", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecr:DescribeRepositories on resource: arn:aws:ecr:*:*:repository/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d33cf0b-b1aa-4be8-83fd-68a48f2fb55e", "record_id": "flaws_cloudtrail:0000481:1d33cf0b-b1aa-4be8-83fd-68a48f2fb55e", "row_index": 481, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d33cf0b-b1aa-4be8-83fd-68a48f2fb55e", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14ef5e3e-f73c-4133-ba3d-a6544b91a5c7", "record_id": "flaws_cloudtrail:0000482:14ef5e3e-f73c-4133-ba3d-a6544b91a5c7", "row_index": 482, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14ef5e3e-f73c-4133-ba3d-a6544b91a5c7", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ace18498-d6a8-4814-be74-c5a64712c2", "record_id": "flaws_cloudtrail:0000483:ace18498-d6a8-4814-be74-c5a64712c2", "row_index": 483, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ace18498-d6a8-4814-be74-c5a64712c2", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5660e1a3-03ef-42ab-b09c-90073f091a6e", "record_id": "flaws_cloudtrail:0000484:5660e1a3-03ef-42ab-b09c-90073f091a6e", "row_index": 484, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5660e1a3-03ef-42ab-b09c-90073f091a6e", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: acm:ListCertificates", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16917e-5037-4624-a6f4-fc3290e410ee", "record_id": "flaws_cloudtrail:0000485:16917e-5037-4624-a6f4-fc3290e410ee", "row_index": 485, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribePolicies", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16917e-5037-4624-a6f4-fc3290e410ee", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribePolicies", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribePolicies", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8627a116-42ba-475f-8941-2c2566c25a1c", "record_id": "flaws_cloudtrail:0000486:8627a116-42ba-475f-8941-2c2566c25a1c", "row_index": 486, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListTaskDefinitions", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8627a116-42ba-475f-8941-2c2566c25a1c", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListTaskDefinitions", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecs:ListTaskDefinitions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33866ec-3b09-4cac-9c4a-d98ea0c84eae", "record_id": "flaws_cloudtrail:0000487:33866ec-3b09-4cac-9c4a-d98ea0c84eae", "row_index": 487, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33866ec-3b09-4cac-9c4a-d98ea0c84eae", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: cloudformation:DescribeStacks", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaa219718-bd18-41a0-a620-70407d4479f", "record_id": "flaws_cloudtrail:0000488:eaa219718-bd18-41a0-a620-70407d4479f", "row_index": 488, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 829, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaa219718-bd18-41a0-a620-70407d4479f", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1ec8ee5-4058-4f7a-b31e-55bdc5bfdef0", "record_id": "flaws_cloudtrail:0000489:b1ec8ee5-4058-4f7a-b31e-55bdc5bfdef0", "row_index": 489, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 825, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1ec8ee5-4058-4f7a-b31e-55bdc5bfdef0", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribeAutoScalingGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145552c43-d1f0-45b1-8ef9-2bd64343", "record_id": "flaws_cloudtrail:0000490:145552c43-d1f0-45b1-8ef9-2bd64343", "row_index": 490, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145552c43-d1f0-45b1-8ef9-2bd64343", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "173438-6539-4137-84fd-a4dce632f7ad", "record_id": "flaws_cloudtrail:0000491:173438-6539-4137-84fd-a4dce632f7ad", "row_index": 491, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "173438-6539-4137-84fd-a4dce632f7ad", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25e6dae6-f48f-42d6-9329-5d9c4ce5be0b", "record_id": "flaws_cloudtrail:0000492:25e6dae6-f48f-42d6-9329-5d9c4ce5be0b", "row_index": 492, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25e6dae6-f48f-42d6-9329-5d9c4ce5be0b", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5075c1c5-cc62-45cb-8d3d-7c99a71cd4e7", "record_id": "flaws_cloudtrail:0000493:5075c1c5-cc62-45cb-8d3d-7c99a71cd4e7", "row_index": 493, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5075c1c5-cc62-45cb-8d3d-7c99a71cd4e7", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69ac8a27-3533-479b-9558-e3b3d8034adc", "record_id": "flaws_cloudtrail:0000494:69ac8a27-3533-479b-9558-e3b3d8034adc", "row_index": 494, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69ac8a27-3533-479b-9558-e3b3d8034adc", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e3373b-a7ba-4062-ba97-28ae307367bbb", "record_id": "flaws_cloudtrail:0000495:14e3373b-a7ba-4062-ba97-28ae307367bbb", "row_index": 495, "timestamp": "2019-07-12T12:17:01Z", "event_type": "ListClusters", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e3373b-a7ba-4062-ba97-28ae307367bbb", "eventTime": "2019-07-12T12:17:01Z", "eventName": "ListClusters", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecs:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4511a8c-6806-4882-be2f-2ff5d393b1dc", "record_id": "flaws_cloudtrail:0000496:e4511a8c-6806-4882-be2f-2ff5d393b1dc", "row_index": 496, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4511a8c-6806-4882-be2f-2ff5d393b1dc", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d76c4fd-bd9d-404b-848a-4c3c53fc8dfd", "record_id": "flaws_cloudtrail:0000497:9d76c4fd-bd9d-404b-848a-4c3c53fc8dfd", "row_index": 497, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d76c4fd-bd9d-404b-848a-4c3c53fc8dfd", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74a5c26e-b5e0-4246-b308-c100f24f7f1b", "record_id": "flaws_cloudtrail:0000498:74a5c26e-b5e0-4246-b308-c100f24f7f1b", "row_index": 498, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeTargetGroups", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74a5c26e-b5e0-4246-b308-c100f24f7f1b", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeTargetGroups", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeTargetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a100e6fe-c76c-49d5-863a-9a3e0888b9ea", "record_id": "flaws_cloudtrail:0000499:a100e6fe-c76c-49d5-863a-9a3e0888b9ea", "row_index": 499, "timestamp": "2019-07-12T12:17:01Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a100e6fe-c76c-49d5-863a-9a3e0888b9ea", "eventTime": "2019-07-12T12:17:01Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90ff126e-c9ae-42ca-802f-f41a84df6780", "record_id": "flaws_cloudtrail:0000500:90ff126e-c9ae-42ca-802f-f41a84df6780", "row_index": 500, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90ff126e-c9ae-42ca-802f-f41a84df6780", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "437461-67f7-4598-a3e6-517ed88c3c27", "record_id": "flaws_cloudtrail:0000501:437461-67f7-4598-a3e6-517ed88c3c27", "row_index": 501, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "437461-67f7-4598-a3e6-517ed88c3c27", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "081888eef-9a41-4ca8-abf3-24a5535bb98c", "record_id": "flaws_cloudtrail:0000502:081888eef-9a41-4ca8-abf3-24a5535bb98c", "row_index": 502, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "081888eef-9a41-4ca8-abf3-24a5535bb98c", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ede08d70-8199-4612-b71d-bdbb73fcda82", "record_id": "flaws_cloudtrail:0000503:ede08d70-8199-4612-b71d-bdbb73fcda82", "row_index": 503, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ede08d70-8199-4612-b71d-bdbb73fcda82", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93009be-e0cb-474b-8875-1bc36595cde4", "record_id": "flaws_cloudtrail:0000504:93009be-e0cb-474b-8875-1bc36595cde4", "row_index": 504, "timestamp": "2019-07-12T12:17:02Z", "event_type": "DescribeImportImageTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA66JZUE332Z4RUPEU", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93009be-e0cb-474b-8875-1bc36595cde4", "eventTime": "2019-07-12T12:17:02Z", "eventName": "DescribeImportImageTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA66JZUE332Z4RUPEU", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T12:17:01Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "requestParameters": {"maxResults": 0}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dc1081c-e6d1-49b0-a4b7-0e655c507678b", "record_id": "flaws_cloudtrail:0000505:4dc1081c-e6d1-49b0-a4b7-0e655c507678b", "row_index": 505, "timestamp": "2019-07-12T12:17:02Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dc1081c-e6d1-49b0-a4b7-0e655c507678b", "eventTime": "2019-07-12T12:17:02Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36f887db-27d7-4544-8541-88df32575b1", "record_id": "flaws_cloudtrail:0000506:36f887db-27d7-4544-8541-88df32575b1", "row_index": 506, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36f887db-27d7-4544-8541-88df32575b1", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9fc483-29ab-42f5-9bf2-84757d95", "record_id": "flaws_cloudtrail:0000507:fb9fc483-29ab-42f5-9bf2-84757d95", "row_index": 507, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9fc483-29ab-42f5-9bf2-84757d95", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3e9c2ef-5bc7-4bc7-aa54-c5b78b089d16", "record_id": "flaws_cloudtrail:0000508:b3e9c2ef-5bc7-4bc7-aa54-c5b78b089d16", "row_index": 508, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3e9c2ef-5bc7-4bc7-aa54-c5b78b089d16", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b24dcc5-d1fa-4f97-8e51-36edf561714", "record_id": "flaws_cloudtrail:0000509:2b24dcc5-d1fa-4f97-8e51-36edf561714", "row_index": 509, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b24dcc5-d1fa-4f97-8e51-36edf561714", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2864cc6-9943-441b-b78c-7122936432ba", "record_id": "flaws_cloudtrail:0000510:e2864cc6-9943-441b-b78c-7122936432ba", "row_index": 510, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2864cc6-9943-441b-b78c-7122936432ba", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb14fd96-9b87-4f47-8fdd-4833847cfe30", "record_id": "flaws_cloudtrail:0000511:bb14fd96-9b87-4f47-8fdd-4833847cfe30", "row_index": 511, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb14fd96-9b87-4f47-8fdd-4833847cfe30", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2906c48-54f2-4577-8cb6-4c601a6d2fc0", "record_id": "flaws_cloudtrail:0000512:e2906c48-54f2-4577-8cb6-4c601a6d2fc0", "row_index": 512, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2906c48-54f2-4577-8cb6-4c601a6d2fc0", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21966d2-dabf-48ee-b0fd-f3904b16e54a", "record_id": "flaws_cloudtrail:0000513:21966d2-dabf-48ee-b0fd-f3904b16e54a", "row_index": 513, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21966d2-dabf-48ee-b0fd-f3904b16e54a", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "960525ed6-4387-4983-b559-8cb124ad914d", "record_id": "flaws_cloudtrail:0000514:960525ed6-4387-4983-b559-8cb124ad914d", "row_index": 514, "timestamp": "2019-07-12T12:17:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "960525ed6-4387-4983-b559-8cb124ad914d", "eventTime": "2019-07-12T12:17:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90ff126e-c9ae-42ca-802f-f41a84df6780", "record_id": "flaws_cloudtrail:0000515:90ff126e-c9ae-42ca-802f-f41a84df6780", "row_index": 515, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90ff126e-c9ae-42ca-802f-f41a84df6780", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "437461-67f7-4598-a3e6-517ed88c3c27", "record_id": "flaws_cloudtrail:0000516:437461-67f7-4598-a3e6-517ed88c3c27", "row_index": 516, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 929, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "437461-67f7-4598-a3e6-517ed88c3c27", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "081888eef-9a41-4ca8-abf3-24a5535bb98c", "record_id": "flaws_cloudtrail:0000517:081888eef-9a41-4ca8-abf3-24a5535bb98c", "row_index": 517, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "081888eef-9a41-4ca8-abf3-24a5535bb98c", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ede08d70-8199-4612-b71d-bdbb73fcda82", "record_id": "flaws_cloudtrail:0000518:ede08d70-8199-4612-b71d-bdbb73fcda82", "row_index": 518, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ede08d70-8199-4612-b71d-bdbb73fcda82", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93009be-e0cb-474b-8875-1bc36595cde4", "record_id": "flaws_cloudtrail:0000519:93009be-e0cb-474b-8875-1bc36595cde4", "row_index": 519, "timestamp": "2019-07-12T12:17:02Z", "event_type": "DescribeImportImageTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIA66JZUE332Z4RUPEU", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93009be-e0cb-474b-8875-1bc36595cde4", "eventTime": "2019-07-12T12:17:02Z", "eventName": "DescribeImportImageTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIA66JZUE332Z4RUPEU", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T12:17:01Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "requestParameters": {"maxResults": 0}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dc1081c-e6d1-49b0-a4b7-0e655c507678b", "record_id": "flaws_cloudtrail:0000520:4dc1081c-e6d1-49b0-a4b7-0e655c507678b", "row_index": 520, "timestamp": "2019-07-12T12:17:02Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dc1081c-e6d1-49b0-a4b7-0e655c507678b", "eventTime": "2019-07-12T12:17:02Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36f887db-27d7-4544-8541-88df32575b1", "record_id": "flaws_cloudtrail:0000521:36f887db-27d7-4544-8541-88df32575b1", "row_index": 521, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36f887db-27d7-4544-8541-88df32575b1", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9fc483-29ab-42f5-9bf2-84757d95", "record_id": "flaws_cloudtrail:0000522:fb9fc483-29ab-42f5-9bf2-84757d95", "row_index": 522, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9fc483-29ab-42f5-9bf2-84757d95", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3e9c2ef-5bc7-4bc7-aa54-c5b78b089d16", "record_id": "flaws_cloudtrail:0000523:b3e9c2ef-5bc7-4bc7-aa54-c5b78b089d16", "row_index": 523, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3e9c2ef-5bc7-4bc7-aa54-c5b78b089d16", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b24dcc5-d1fa-4f97-8e51-36edf561714", "record_id": "flaws_cloudtrail:0000524:2b24dcc5-d1fa-4f97-8e51-36edf561714", "row_index": 524, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b24dcc5-d1fa-4f97-8e51-36edf561714", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2864cc6-9943-441b-b78c-7122936432ba", "record_id": "flaws_cloudtrail:0000525:e2864cc6-9943-441b-b78c-7122936432ba", "row_index": 525, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2864cc6-9943-441b-b78c-7122936432ba", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb14fd96-9b87-4f47-8fdd-4833847cfe30", "record_id": "flaws_cloudtrail:0000526:bb14fd96-9b87-4f47-8fdd-4833847cfe30", "row_index": 526, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb14fd96-9b87-4f47-8fdd-4833847cfe30", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2906c48-54f2-4577-8cb6-4c601a6d2fc0", "record_id": "flaws_cloudtrail:0000527:e2906c48-54f2-4577-8cb6-4c601a6d2fc0", "row_index": 527, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2906c48-54f2-4577-8cb6-4c601a6d2fc0", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21966d2-dabf-48ee-b0fd-f3904b16e54a", "record_id": "flaws_cloudtrail:0000528:21966d2-dabf-48ee-b0fd-f3904b16e54a", "row_index": 528, "timestamp": "2019-07-12T12:17:02Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21966d2-dabf-48ee-b0fd-f3904b16e54a", "eventTime": "2019-07-12T12:17:02Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "960525ed6-4387-4983-b559-8cb124ad914d", "record_id": "flaws_cloudtrail:0000529:960525ed6-4387-4983-b559-8cb124ad914d", "row_index": 529, "timestamp": "2019-07-12T12:17:02Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "960525ed6-4387-4983-b559-8cb124ad914d", "eventTime": "2019-07-12T12:17:02Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lambda:ListFunctions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a13c533-a229-4a51-98f5-a7ffd3a27dd5", "record_id": "flaws_cloudtrail:0000530:1a13c533-a229-4a51-98f5-a7ffd3a27dd5", "row_index": 530, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeTargetGroups", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a13c533-a229-4a51-98f5-a7ffd3a27dd5", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeTargetGroups", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeTargetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7eef9eb-b97f-40ec-aad4-03a9ef6fb3b2", "record_id": "flaws_cloudtrail:0000531:d7eef9eb-b97f-40ec-aad4-03a9ef6fb3b2", "row_index": 531, "timestamp": "2019-07-12T12:17:03Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7eef9eb-b97f-40ec-aad4-03a9ef6fb3b2", "eventTime": "2019-07-12T12:17:03Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: acm:ListCertificates", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54951-ea12-44f6-adf0-3bfcb5d1ae21", "record_id": "flaws_cloudtrail:0000532:54951-ea12-44f6-adf0-3bfcb5d1ae21", "row_index": 532, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54951-ea12-44f6-adf0-3bfcb5d1ae21", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f73070-e4fb-493e-b585-21168d82e53", "record_id": "flaws_cloudtrail:0000533:f73070-e4fb-493e-b585-21168d82e53", "row_index": 533, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f73070-e4fb-493e-b585-21168d82e53", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6567a9c8-a0ee-42ec-9721-26be979cc7ed", "record_id": "flaws_cloudtrail:0000534:6567a9c8-a0ee-42ec-9721-26be979cc7ed", "row_index": 534, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6567a9c8-a0ee-42ec-9721-26be979cc7ed", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdfb4507-5eab-41ba-a312-49fbcf815c04", "record_id": "flaws_cloudtrail:0000535:bdfb4507-5eab-41ba-a312-49fbcf815c04", "row_index": 535, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdfb4507-5eab-41ba-a312-49fbcf815c04", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "151a965c-f0e2-4701-a8cd-ca607d15c314", "record_id": "flaws_cloudtrail:0000536:151a965c-f0e2-4701-a8cd-ca607d15c314", "row_index": 536, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "151a965c-f0e2-4701-a8cd-ca607d15c314", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "300a31a3-2a12-4d2c-8dca-d45f61bdedac", "record_id": "flaws_cloudtrail:0000537:300a31a3-2a12-4d2c-8dca-d45f61bdedac", "row_index": 537, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "300a31a3-2a12-4d2c-8dca-d45f61bdedac", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03854d-b060-47d3-afbb-e8e21a464042", "record_id": "flaws_cloudtrail:0000538:03854d-b060-47d3-afbb-e8e21a464042", "row_index": 538, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03854d-b060-47d3-afbb-e8e21a464042", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4fc7f15-a192-4b11-8482-d417b9411b97", "record_id": "flaws_cloudtrail:0000539:b4fc7f15-a192-4b11-8482-d417b9411b97", "row_index": 539, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4fc7f15-a192-4b11-8482-d417b9411b97", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b700c5-b6b3-4f75-9de0-02d71515d49", "record_id": "flaws_cloudtrail:0000540:e9b700c5-b6b3-4f75-9de0-02d71515d49", "row_index": 540, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b700c5-b6b3-4f75-9de0-02d71515d49", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa08328-7319-4210-8aec-21954d2de2fa", "record_id": "flaws_cloudtrail:0000541:aa08328-7319-4210-8aec-21954d2de2fa", "row_index": 541, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa08328-7319-4210-8aec-21954d2de2fa", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0236a9f-3c84-4e15-9bac-7ba368ef5acf", "record_id": "flaws_cloudtrail:0000542:e0236a9f-3c84-4e15-9bac-7ba368ef5acf", "row_index": 542, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0236a9f-3c84-4e15-9bac-7ba368ef5acf", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cac7ad6-f793-461f-b1ac-6828ddd9b05a", "record_id": "flaws_cloudtrail:0000543:2cac7ad6-f793-461f-b1ac-6828ddd9b05a", "row_index": 543, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cac7ad6-f793-461f-b1ac-6828ddd9b05a", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f01185-a631-454f-9290-42e8b8e1662c", "record_id": "flaws_cloudtrail:0000544:5f01185-a631-454f-9290-42e8b8e1662c", "row_index": 544, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f01185-a631-454f-9290-42e8b8e1662c", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9bc06ef-366f-43f8-8f60-553db23492a7", "record_id": "flaws_cloudtrail:0000545:c9bc06ef-366f-43f8-8f60-553db23492a7", "row_index": 545, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9bc06ef-366f-43f8-8f60-553db23492a7", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57371cc-ed37-4e52-a744-812d9f90e1cb", "record_id": "flaws_cloudtrail:0000546:57371cc-ed37-4e52-a744-812d9f90e1cb", "row_index": 546, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57371cc-ed37-4e52-a744-812d9f90e1cb", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "875d283a-dc9b-49d0-ac0e-9e26d9b5d53c", "record_id": "flaws_cloudtrail:0000547:875d283a-dc9b-49d0-ac0e-9e26d9b5d53c", "row_index": 547, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "875d283a-dc9b-49d0-ac0e-9e26d9b5d53c", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecr:DescribeRepositories on resource: arn:aws:ecr:*:*:repository/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92256b7-a693-41b0-8146-900427c7d", "record_id": "flaws_cloudtrail:0000548:92256b7-a693-41b0-8146-900427c7d", "row_index": 548, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeImportImageTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGNVT10PMAP2Q1957", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92256b7-a693-41b0-8146-900427c7d", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeImportImageTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGNVT10PMAP2Q1957", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T12:17:01Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "requestParameters": {"maxResults": 0}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cfd6ab6-334c-4a5d-bc26-6e52c31d3c61", "record_id": "flaws_cloudtrail:0000549:2cfd6ab6-334c-4a5d-bc26-6e52c31d3c61", "row_index": 549, "timestamp": "2019-07-12T12:17:03Z", "event_type": "ListClusters", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cfd6ab6-334c-4a5d-bc26-6e52c31d3c61", "eventTime": "2019-07-12T12:17:03Z", "eventName": "ListClusters", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecs:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "376ea826-d13a-4ca5-a6d1-ba991b02e38c", "record_id": "flaws_cloudtrail:0000550:376ea826-d13a-4ca5-a6d1-ba991b02e38c", "row_index": 550, "timestamp": "2019-07-12T12:17:03Z", "event_type": "ListTaskDefinitions", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "376ea826-d13a-4ca5-a6d1-ba991b02e38c", "eventTime": "2019-07-12T12:17:03Z", "eventName": "ListTaskDefinitions", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecs:ListTaskDefinitions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88544d2a-9803-46ab-a10b-7949fc8232c4", "record_id": "flaws_cloudtrail:0000551:88544d2a-9803-46ab-a10b-7949fc8232c4", "row_index": 551, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88544d2a-9803-46ab-a10b-7949fc8232c4", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d8d7f50-dcc7-44fe-a231-84149cfb1bac", "record_id": "flaws_cloudtrail:0000552:3d8d7f50-dcc7-44fe-a231-84149cfb1bac", "row_index": 552, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d8d7f50-dcc7-44fe-a231-84149cfb1bac", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6fac315-80ab-41b8-ac39-c41ee90a7173", "record_id": "flaws_cloudtrail:0000553:a6fac315-80ab-41b8-ac39-c41ee90a7173", "row_index": 553, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6fac315-80ab-41b8-ac39-c41ee90a7173", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd58e3a-0785-47ab-bc5e-f3292fe04f11", "record_id": "flaws_cloudtrail:0000554:1fd58e3a-0785-47ab-bc5e-f3292fe04f11", "row_index": 554, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd58e3a-0785-47ab-bc5e-f3292fe04f11", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad4da334-5027-4080-b616-cb573bff368b", "record_id": "flaws_cloudtrail:0000555:ad4da334-5027-4080-b616-cb573bff368b", "row_index": 555, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeLaunchConfigurations", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad4da334-5027-4080-b616-cb573bff368b", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeLaunchConfigurations", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribeLaunchConfigurations", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1d77456-c3d5-4411-b282-ff449723c1c", "record_id": "flaws_cloudtrail:0000556:b1d77456-c3d5-4411-b282-ff449723c1c", "row_index": 556, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1d77456-c3d5-4411-b282-ff449723c1c", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribeAutoScalingGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73aa5f44-204c-4c51-bedf-3532f1253110", "record_id": "flaws_cloudtrail:0000557:73aa5f44-204c-4c51-bedf-3532f1253110", "row_index": 557, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribePolicies", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73aa5f44-204c-4c51-bedf-3532f1253110", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribePolicies", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribePolicies", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7af0a186-3d5f-4419-8476-160090ceb2af", "record_id": "flaws_cloudtrail:0000558:7af0a186-3d5f-4419-8476-160090ceb2af", "row_index": 558, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7af0a186-3d5f-4419-8476-160090ceb2af", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdcb84c1-c46d-4c0f-b265-5ce9488e55ce", "record_id": "flaws_cloudtrail:0000559:cdcb84c1-c46d-4c0f-b265-5ce9488e55ce", "row_index": 559, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdcb84c1-c46d-4c0f-b265-5ce9488e55ce", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15d0001-06e2-4ca5-9286-15c3119a0c0a", "record_id": "flaws_cloudtrail:0000560:a15d0001-06e2-4ca5-9286-15c3119a0c0a", "row_index": 560, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15d0001-06e2-4ca5-9286-15c3119a0c0a", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}, "availabilityZoneIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a68eea12-4f19-474d-b457-eff90912bc", "record_id": "flaws_cloudtrail:0000561:a68eea12-4f19-474d-b457-eff90912bc", "row_index": 561, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a68eea12-4f19-474d-b457-eff90912bc", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "857b508d-0a43-4f31-85c7-a128362d9f5dc", "record_id": "flaws_cloudtrail:0000562:857b508d-0a43-4f31-85c7-a128362d9f5dc", "row_index": 562, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "857b508d-0a43-4f31-85c7-a128362d9f5dc", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a977530e3-9bcd-4ebb-8bb7-b11f469837ef8", "record_id": "flaws_cloudtrail:0000563:a977530e3-9bcd-4ebb-8bb7-b11f469837ef8", "row_index": 563, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a977530e3-9bcd-4ebb-8bb7-b11f469837ef8", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bf8ec96-9754-44de-a35f-e720c0376569", "record_id": "flaws_cloudtrail:0000564:8bf8ec96-9754-44de-a35f-e720c0376569", "row_index": 564, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bf8ec96-9754-44de-a35f-e720c0376569", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54515ead-9087-4af3-9431-39c4ae6e8a80", "record_id": "flaws_cloudtrail:0000565:54515ead-9087-4af3-9431-39c4ae6e8a80", "row_index": 565, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54515ead-9087-4af3-9431-39c4ae6e8a80", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a13c533-a229-4a51-98f5-a7ffd3a27dd5", "record_id": "flaws_cloudtrail:0000566:1a13c533-a229-4a51-98f5-a7ffd3a27dd5", "row_index": 566, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeTargetGroups", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a13c533-a229-4a51-98f5-a7ffd3a27dd5", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeTargetGroups", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeTargetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7eef9eb-b97f-40ec-aad4-03a9ef6fb3b2", "record_id": "flaws_cloudtrail:0000567:d7eef9eb-b97f-40ec-aad4-03a9ef6fb3b2", "row_index": 567, "timestamp": "2019-07-12T12:17:03Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7eef9eb-b97f-40ec-aad4-03a9ef6fb3b2", "eventTime": "2019-07-12T12:17:03Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: acm:ListCertificates", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54951-ea12-44f6-adf0-3bfcb5d1ae21", "record_id": "flaws_cloudtrail:0000568:54951-ea12-44f6-adf0-3bfcb5d1ae21", "row_index": 568, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54951-ea12-44f6-adf0-3bfcb5d1ae21", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f73070-e4fb-493e-b585-21168d82e53", "record_id": "flaws_cloudtrail:0000569:f73070-e4fb-493e-b585-21168d82e53", "row_index": 569, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f73070-e4fb-493e-b585-21168d82e53", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6567a9c8-a0ee-42ec-9721-26be979cc7ed", "record_id": "flaws_cloudtrail:0000570:6567a9c8-a0ee-42ec-9721-26be979cc7ed", "row_index": 570, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 934, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6567a9c8-a0ee-42ec-9721-26be979cc7ed", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["config-bucket-e11723be76de.s3.us-west-2.amazonaws.com"], "bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdfb4507-5eab-41ba-a312-49fbcf815c04", "record_id": "flaws_cloudtrail:0000571:bdfb4507-5eab-41ba-a312-49fbcf815c04", "row_index": 571, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 901, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdfb4507-5eab-41ba-a312-49fbcf815c04", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["flaws-logs.s3.us-west-2.amazonaws.com"], "bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "151a965c-f0e2-4701-a8cd-ca607d15c314", "record_id": "flaws_cloudtrail:0000572:151a965c-f0e2-4701-a8cd-ca607d15c314", "row_index": 572, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "151a965c-f0e2-4701-a8cd-ca607d15c314", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "300a31a3-2a12-4d2c-8dca-d45f61bdedac", "record_id": "flaws_cloudtrail:0000573:300a31a3-2a12-4d2c-8dca-d45f61bdedac", "row_index": 573, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "300a31a3-2a12-4d2c-8dca-d45f61bdedac", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03854d-b060-47d3-afbb-e8e21a464042", "record_id": "flaws_cloudtrail:0000574:03854d-b060-47d3-afbb-e8e21a464042", "row_index": 574, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03854d-b060-47d3-afbb-e8e21a464042", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4fc7f15-a192-4b11-8482-d417b9411b97", "record_id": "flaws_cloudtrail:0000575:b4fc7f15-a192-4b11-8482-d417b9411b97", "row_index": 575, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeNatGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4fc7f15-a192-4b11-8482-d417b9411b97", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeNatGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"DescribeNatGatewaysRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9b700c5-b6b3-4f75-9de0-02d71515d49", "record_id": "flaws_cloudtrail:0000576:e9b700c5-b6b3-4f75-9de0-02d71515d49", "row_index": 576, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9b700c5-b6b3-4f75-9de0-02d71515d49", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa08328-7319-4210-8aec-21954d2de2fa", "record_id": "flaws_cloudtrail:0000577:aa08328-7319-4210-8aec-21954d2de2fa", "row_index": 577, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa08328-7319-4210-8aec-21954d2de2fa", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0236a9f-3c84-4e15-9bac-7ba368ef5acf", "record_id": "flaws_cloudtrail:0000578:e0236a9f-3c84-4e15-9bac-7ba368ef5acf", "row_index": 578, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0236a9f-3c84-4e15-9bac-7ba368ef5acf", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cac7ad6-f793-461f-b1ac-6828ddd9b05a", "record_id": "flaws_cloudtrail:0000579:2cac7ad6-f793-461f-b1ac-6828ddd9b05a", "row_index": 579, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cac7ad6-f793-461f-b1ac-6828ddd9b05a", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticloadbalancing:DescribeLoadBalancers", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f01185-a631-454f-9290-42e8b8e1662c", "record_id": "flaws_cloudtrail:0000580:5f01185-a631-454f-9290-42e8b8e1662c", "row_index": 580, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f01185-a631-454f-9290-42e8b8e1662c", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9bc06ef-366f-43f8-8f60-553db23492a7", "record_id": "flaws_cloudtrail:0000581:c9bc06ef-366f-43f8-8f60-553db23492a7", "row_index": 581, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 932, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9bc06ef-366f-43f8-8f60-553db23492a7", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57371cc-ed37-4e52-a744-812d9f90e1cb", "record_id": "flaws_cloudtrail:0000582:57371cc-ed37-4e52-a744-812d9f90e1cb", "row_index": 582, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57371cc-ed37-4e52-a744-812d9f90e1cb", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "875d283a-dc9b-49d0-ac0e-9e26d9b5d53c", "record_id": "flaws_cloudtrail:0000583:875d283a-dc9b-49d0-ac0e-9e26d9b5d53c", "row_index": 583, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "875d283a-dc9b-49d0-ac0e-9e26d9b5d53c", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecr:DescribeRepositories on resource: arn:aws:ecr:*:*:repository/*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92256b7-a693-41b0-8146-900427c7d", "record_id": "flaws_cloudtrail:0000584:92256b7-a693-41b0-8146-900427c7d", "row_index": 584, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeImportImageTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "ASIAGNVT10PMAP2Q1957", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92256b7-a693-41b0-8146-900427c7d", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeImportImageTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "ASIAGNVT10PMAP2Q1957", "userName": "backup", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2019-07-12T12:17:01Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "requestParameters": {"maxResults": 0}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cfd6ab6-334c-4a5d-bc26-6e52c31d3c61", "record_id": "flaws_cloudtrail:0000585:2cfd6ab6-334c-4a5d-bc26-6e52c31d3c61", "row_index": 585, "timestamp": "2019-07-12T12:17:03Z", "event_type": "ListClusters", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cfd6ab6-334c-4a5d-bc26-6e52c31d3c61", "eventTime": "2019-07-12T12:17:03Z", "eventName": "ListClusters", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecs:ListClusters on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "376ea826-d13a-4ca5-a6d1-ba991b02e38c", "record_id": "flaws_cloudtrail:0000586:376ea826-d13a-4ca5-a6d1-ba991b02e38c", "row_index": 586, "timestamp": "2019-07-12T12:17:03Z", "event_type": "ListTaskDefinitions", "event_source": "ecs.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "376ea826-d13a-4ca5-a6d1-ba991b02e38c", "eventTime": "2019-07-12T12:17:03Z", "eventName": "ListTaskDefinitions", "eventSource": "ecs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: ecs:ListTaskDefinitions on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88544d2a-9803-46ab-a10b-7949fc8232c4", "record_id": "flaws_cloudtrail:0000587:88544d2a-9803-46ab-a10b-7949fc8232c4", "row_index": 587, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 928, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88544d2a-9803-46ab-a10b-7949fc8232c4", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3d8d7f50-dcc7-44fe-a231-84149cfb1bac", "record_id": "flaws_cloudtrail:0000588:3d8d7f50-dcc7-44fe-a231-84149cfb1bac", "row_index": 588, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 891, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3d8d7f50-dcc7-44fe-a231-84149cfb1bac", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6fac315-80ab-41b8-ac39-c41ee90a7173", "record_id": "flaws_cloudtrail:0000589:a6fac315-80ab-41b8-ac39-c41ee90a7173", "row_index": 589, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6fac315-80ab-41b8-ac39-c41ee90a7173", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fd58e3a-0785-47ab-bc5e-f3292fe04f11", "record_id": "flaws_cloudtrail:0000590:1fd58e3a-0785-47ab-bc5e-f3292fe04f11", "row_index": 590, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 931, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fd58e3a-0785-47ab-bc5e-f3292fe04f11", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad4da334-5027-4080-b616-cb573bff368b", "record_id": "flaws_cloudtrail:0000591:ad4da334-5027-4080-b616-cb573bff368b", "row_index": 591, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeLaunchConfigurations", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad4da334-5027-4080-b616-cb573bff368b", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeLaunchConfigurations", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribeLaunchConfigurations", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1d77456-c3d5-4411-b282-ff449723c1c", "record_id": "flaws_cloudtrail:0000592:b1d77456-c3d5-4411-b282-ff449723c1c", "row_index": 592, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeAutoScalingGroups", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1d77456-c3d5-4411-b282-ff449723c1c", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeAutoScalingGroups", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribeAutoScalingGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73aa5f44-204c-4c51-bedf-3532f1253110", "record_id": "flaws_cloudtrail:0000593:73aa5f44-204c-4c51-bedf-3532f1253110", "row_index": 593, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribePolicies", "event_source": "autoscaling.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73aa5f44-204c-4c51-bedf-3532f1253110", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribePolicies", "eventSource": "autoscaling.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: autoscaling:DescribePolicies", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7af0a186-3d5f-4419-8476-160090ceb2af", "record_id": "flaws_cloudtrail:0000594:7af0a186-3d5f-4419-8476-160090ceb2af", "row_index": 594, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7af0a186-3d5f-4419-8476-160090ceb2af", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdcb84c1-c46d-4c0f-b265-5ce9488e55ce", "record_id": "flaws_cloudtrail:0000595:cdcb84c1-c46d-4c0f-b265-5ce9488e55ce", "row_index": 595, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdcb84c1-c46d-4c0f-b265-5ce9488e55ce", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a15d0001-06e2-4ca5-9286-15c3119a0c0a", "record_id": "flaws_cloudtrail:0000596:a15d0001-06e2-4ca5-9286-15c3119a0c0a", "row_index": 596, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a15d0001-06e2-4ca5-9286-15c3119a0c0a", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}, "availabilityZoneIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a68eea12-4f19-474d-b457-eff90912bc", "record_id": "flaws_cloudtrail:0000597:a68eea12-4f19-474d-b457-eff90912bc", "row_index": 597, "timestamp": "2019-07-12T12:17:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 930, "raw_record_depth": 3, "raw_record_top_level_keys": ["additionalEventData", "awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a68eea12-4f19-474d-b457-eff90912bc", "eventTime": "2019-07-12T12:17:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "[aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"host": ["s3.us-west-2.amazonaws.com"], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "857b508d-0a43-4f31-85c7-a128362d9f5dc", "record_id": "flaws_cloudtrail:0000598:857b508d-0a43-4f31-85c7-a128362d9f5dc", "row_index": 598, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "857b508d-0a43-4f31-85c7-a128362d9f5dc", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a977530e3-9bcd-4ebb-8bb7-b11f469837ef8", "record_id": "flaws_cloudtrail:0000599:a977530e3-9bcd-4ebb-8bb7-b11f469837ef8", "row_index": 599, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a977530e3-9bcd-4ebb-8bb7-b11f469837ef8", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: rds:DescribeDBSubnetGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bf8ec96-9754-44de-a35f-e720c0376569", "record_id": "flaws_cloudtrail:0000600:8bf8ec96-9754-44de-a35f-e720c0376569", "row_index": 600, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bf8ec96-9754-44de-a35f-e720c0376569", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54515ead-9087-4af3-9431-39c4ae6e8a80", "record_id": "flaws_cloudtrail:0000601:54515ead-9087-4af3-9431-39c4ae6e8a80", "row_index": 601, "timestamp": "2019-07-12T12:17:03Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54515ead-9087-4af3-9431-39c4ae6e8a80", "eventTime": "2019-07-12T12:17:03Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52a02f7e-f0bf-4414-a7b4-0a1352de9987", "record_id": "flaws_cloudtrail:0000602:52a02f7e-f0bf-4414-a7b4-0a1352de9987", "row_index": 602, "timestamp": "2019-07-12T12:17:42Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52a02f7e-f0bf-4414-a7b4-0a1352de9987", "eventTime": "2019-07-12T12:17:42Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: route53:ListHostedZones", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b7e0ab4-5ef6-42c9-bfad-43d9ccc004f2", "record_id": "flaws_cloudtrail:0000603:9b7e0ab4-5ef6-42c9-bfad-43d9ccc004f2", "row_index": 603, "timestamp": "2019-07-12T12:17:42Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b7e0ab4-5ef6-42c9-bfad-43d9ccc004f2", "eventTime": "2019-07-12T12:17:42Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListUsers on resource: arn:aws:iam::811596193553:user/", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a904877-4341-40f3-a3b9-05bae3dab50a", "record_id": "flaws_cloudtrail:0000604:a904877-4341-40f3-a3b9-05bae3dab50a", "row_index": 604, "timestamp": "2019-07-12T12:17:42Z", "event_type": "GetAccountAuthorizationDetails", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "55.250.102.14", "user_agent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a904877-4341-40f3-a3b9-05bae3dab50a", "eventTime": "2019-07-12T12:17:42Z", "eventName": "GetAccountAuthorizationDetails", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "55.250.102.14", "userAgent": "aws-sdk-go/1.12.55 (go1.10.3; darwin; amd64)", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetAccountAuthorizationDetails on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}