Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a8becd2-0329-4e12-a2f1-ac452d680463", "record_id": "flaws_cloudtrail:0000000:7a8becd2-0329-4e12-a2f1-ac452d680463", "row_index": 0, "timestamp": "2017-02-28T21:36:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "225.135.209.251", "user_agent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 889, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a8becd2-0329-4e12-a2f1-ac452d680463", "eventTime": "2017-02-28T21:36:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "225.135.209.251", "userAgent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "awsRegion": "us-west-2", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d81fdedc-d7f7-4012-a57a-d728845cbc45", "record_id": "flaws_cloudtrail:0000001:d81fdedc-d7f7-4012-a57a-d728845cbc45", "row_index": 1, "timestamp": "2017-02-28T21:36:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "225.135.209.251", "user_agent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 915, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d81fdedc-d7f7-4012-a57a-d728845cbc45", "eventTime": "2017-02-28T21:36:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "225.135.209.251", "userAgent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "awsRegion": "us-west-2", "errorCode": "Client.InvalidSnapshotID.Malformed", "errorMessage": "Invalid id: \"snap-1d007bbc447760da\"", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-1d007bbc447760da"}]}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e55036-11ba-4b14-a4dd-6d25cc15521d", "record_id": "flaws_cloudtrail:0000002:e55036-11ba-4b14-a4dd-6d25cc15521d", "row_index": 2, "timestamp": "2017-02-28T21:37:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "225.135.209.251", "user_agent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 938, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e55036-11ba-4b14-a4dd-6d25cc15521d", "eventTime": "2017-02-28T21:37:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "225.135.209.251", "userAgent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "awsRegion": "us-west-2", "errorCode": "Client.InvalidParameterValue", "errorMessage": "Value (811596193553) for parameter snapshotId is invalid. Expected: 'snap-...'.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "811596193553"}]}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e497f62d-c843-4a9f-8b41-7a390155dfc5", "record_id": "flaws_cloudtrail:0000003:e497f62d-c843-4a9f-8b41-7a390155dfc5", "row_index": 3, "timestamp": "2017-02-28T21:37:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "225.135.209.251", "user_agent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e497f62d-c843-4a9f-8b41-7a390155dfc5", "eventTime": "2017-02-28T21:37:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "225.135.209.251", "userAgent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-83d15d668fb2941db"}]}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c79bcff8-29db-481c-9500-5b6a843322c", "record_id": "flaws_cloudtrail:0000004:c79bcff8-29db-481c-9500-5b6a843322c", "row_index": 4, "timestamp": "2017-02-28T21:38:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "[aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c79bcff8-29db-481c-9500-5b6a843322c", "eventTime": "2017-02-28T21:38:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "[aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c79bcff8-29db-481c-9500-5b6a843322c", "record_id": "flaws_cloudtrail:0000005:c79bcff8-29db-481c-9500-5b6a843322c", "row_index": 5, "timestamp": "2017-02-28T21:38:11Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "[aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c79bcff8-29db-481c-9500-5b6a843322c", "eventTime": "2017-02-28T21:38:11Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "[aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efcaab98-3496-4208-9a4c-bdc386c51dd8", "record_id": "flaws_cloudtrail:0000006:efcaab98-3496-4208-9a4c-bdc386c51dd8", "row_index": 6, "timestamp": "2017-02-28T21:38:15Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.232.0.17", "user_agent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efcaab98-3496-4208-9a4c-bdc386c51dd8", "eventTime": "2017-02-28T21:38:15Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.232.0.17", "userAgent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "244517dd0-fa9c-4755-b04c-d71245896eaa", "record_id": "flaws_cloudtrail:0000007:244517dd0-fa9c-4755-b04c-d71245896eaa", "row_index": 7, "timestamp": "2017-02-28T21:38:34Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.232.0.17", "user_agent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "244517dd0-fa9c-4755-b04c-d71245896eaa", "eventTime": "2017-02-28T21:38:34Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.232.0.17", "userAgent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42b0172e-de2a-4a57-8286-0a0d026995d3", "record_id": "flaws_cloudtrail:0000008:42b0172e-de2a-4a57-8286-0a0d026995d3", "row_index": 8, "timestamp": "2017-02-28T21:39:13Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.232.0.17", "user_agent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42b0172e-de2a-4a57-8286-0a0d026995d3", "eventTime": "2017-02-28T21:39:13Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.232.0.17", "userAgent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-east-1::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c56269f6-4a1c-4a4c-97c8-c43a1ffe0e4c", "record_id": "flaws_cloudtrail:0000009:c56269f6-4a1c-4a4c-97c8-c43a1ffe0e4c", "row_index": 9, "timestamp": "2017-02-28T21:39:24Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.232.0.17", "user_agent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c56269f6-4a1c-4a4c-97c8-c43a1ffe0e4c", "eventTime": "2017-02-28T21:39:24Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.232.0.17", "userAgent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f81c6801-d8b9-417d-9cbb-96abebc95a8d", "record_id": "flaws_cloudtrail:0000010:f81c6801-d8b9-417d-9cbb-96abebc95a8d", "row_index": 10, "timestamp": "2017-02-28T21:39:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "[aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f81c6801-d8b9-417d-9cbb-96abebc95a8d", "eventTime": "2017-02-28T21:39:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "[aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f81c6801-d8b9-417d-9cbb-96abebc95a8d", "record_id": "flaws_cloudtrail:0000011:f81c6801-d8b9-417d-9cbb-96abebc95a8d", "row_index": 11, "timestamp": "2017-02-28T21:39:27Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "[aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 653, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f81c6801-d8b9-417d-9cbb-96abebc95a8d", "eventTime": "2017-02-28T21:39:27Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "[aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb2ee172-7f33-43dc-9e07-0ad9d7b6e259", "record_id": "flaws_cloudtrail:0000012:eb2ee172-7f33-43dc-9e07-0ad9d7b6e259", "row_index": 12, "timestamp": "2017-02-28T21:39:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb2ee172-7f33-43dc-9e07-0ad9d7b6e259", "eventTime": "2017-02-28T21:39:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d59929-503b-494a-a8df-25c0e8b72d93", "record_id": "flaws_cloudtrail:0000013:d59929-503b-494a-a8df-25c0e8b72d93", "row_index": 13, "timestamp": "2017-02-28T21:40:13Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.232.0.17", "user_agent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d59929-503b-494a-a8df-25c0e8b72d93", "eventTime": "2017-02-28T21:40:13Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.232.0.17", "userAgent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e0c410d-6373-4a0f-a69d-f1a1efe08358", "record_id": "flaws_cloudtrail:0000014:3e0c410d-6373-4a0f-a69d-f1a1efe08358", "row_index": 14, "timestamp": "2017-02-28T21:40:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "225.135.209.251", "user_agent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e0c410d-6373-4a0f-a69d-f1a1efe08358", "eventTime": "2017-02-28T21:40:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "225.135.209.251", "userAgent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-83d15d668fb2941db"}]}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79117ae1-1a07-425c-ab5f-bb2a76a5813f", "record_id": "flaws_cloudtrail:0000015:79117ae1-1a07-425c-ab5f-bb2a76a5813f", "row_index": 15, "timestamp": "2017-02-28T21:40:34Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.232.0.17", "user_agent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79117ae1-1a07-425c-ab5f-bb2a76a5813f", "eventTime": "2017-02-28T21:40:34Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.232.0.17", "userAgent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d284e85f-8180-448d-9271-6ab881627", "record_id": "flaws_cloudtrail:0000016:d284e85f-8180-448d-9271-6ab881627", "row_index": 16, "timestamp": "2017-02-28T21:40:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "225.135.209.251", "user_agent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 918, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d284e85f-8180-448d-9271-6ab881627", "eventTime": "2017-02-28T21:40:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "225.135.209.251", "userAgent": "aws-cli/1.11.55 Python/2.7.9 Windows/7 botocore/1.5.18", "awsRegion": "us-west-2", "errorCode": "Client.DryRunOperation", "errorMessage": "Request would have succeeded, but DryRun flag is set.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-83d15d668fb2941db"}]}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18a61526-04a0-4bf7-bc01-c9d12574ad", "record_id": "flaws_cloudtrail:0000017:18a61526-04a0-4bf7-bc01-c9d12574ad", "row_index": 17, "timestamp": "2017-02-28T21:41:25Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "17.232.0.17", "user_agent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18a61526-04a0-4bf7-bc01-c9d12574ad", "eventTime": "2017-02-28T21:41:25Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "17.232.0.17", "userAgent": "aws-cli/1.11.28 Python/2.7.13 Darwin/16.0.0 botocore/1.4.85", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8e2e4fd-3a88-4fbf-babe-cba18258c32a", "record_id": "flaws_cloudtrail:0000018:a8e2e4fd-3a88-4fbf-babe-cba18258c32a", "row_index": 18, "timestamp": "2017-02-28T21:41:25Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8e2e4fd-3a88-4fbf-babe-cba18258c32a", "eventTime": "2017-02-28T21:41:25Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9b11b6e-d3cb-495f-bd67-c20e6fabcea7", "record_id": "flaws_cloudtrail:0000019:d9b11b6e-d3cb-495f-bd67-c20e6fabcea7", "row_index": 19, "timestamp": "2017-02-28T21:43:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9b11b6e-d3cb-495f-bd67-c20e6fabcea7", "eventTime": "2017-02-28T21:43:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae74d7f7-925c-4bff-ae9b-2c7cffd4f192", "record_id": "flaws_cloudtrail:0000020:ae74d7f7-925c-4bff-ae9b-2c7cffd4f192", "row_index": 20, "timestamp": "2017-02-28T21:43:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae74d7f7-925c-4bff-ae9b-2c7cffd4f192", "eventTime": "2017-02-28T21:43:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJTT3RpMy85YVJWTllrd1lhMmI0MG9NY0FGaVdjZ1M1V2U0LzNYQUdzZVFkbnV0cVcxLy8vakQvN1p1QWpqc2lPYjZ1SkVRV0dCNGtJRWZobGFsOWsvVkNZaThZdHNpeThtYnZMWG1jNlNNMGk3U2tISzI2Skw2ZHcyUDA2SGpLbU01WHBWOWMwQ29lK1pxY2ZJSHVLQ0E9PSIsImkiOiJKaEhtVWJhMmt6S2VzTUpISmJ6SmpRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16599d86-7853-472f-a68c-3a5e824cabb3", "record_id": "flaws_cloudtrail:0000021:16599d86-7853-472f-a68c-3a5e824cabb3", "row_index": 21, "timestamp": "2017-02-28T21:43:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16599d86-7853-472f-a68c-3a5e824cabb3", "eventTime": "2017-02-28T21:43:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJXWFA2M1c5SHpDSS9tM0l3dmJ5Z0lENGdzTDM3VkMwUERGYWkrMmdRelVRblhSSUw5ZTdSbWFmWVdDRittWHRPeTQ5KzNQSXc3VmtSSmc0bFBLZSs5MXdIamFkRHZVOC9EOTB3ejdmRG90NlRWdDZMRXNnZDhTQmtPMi9GVWRUamowVTlYWDF0QUdHc2pkS0hpaENDMUE9PSIsImkiOiJ4MnJvdm5WVGNqZEQ0NEl2eEMxTnlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d81b4bc3-c00c-4955-b087-94b48082b", "record_id": "flaws_cloudtrail:0000022:d81b4bc3-c00c-4955-b087-94b48082b", "row_index": 22, "timestamp": "2017-02-28T21:43:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d81b4bc3-c00c-4955-b087-94b48082b", "eventTime": "2017-02-28T21:43:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJnVU1FWUlieDc2dDhhUWZCVG5wYVFtOUhZUHY3bkhXWUhPeG10RnVTc3d3U2JhbUxwaDhKL0pqMjhFeVRxQSsxNFpCY09OU3VMZjd5bVBrNHh3d0oxV0MzUCtBYmNkT29GQXJWUTU1cnMvdS9pcGNncDBleEF4eUtYTTFxanhEZjFxRFg2ek9xeW1jRW15WFVzdkFtL0E9PSIsImkiOiI3ZmJzN2VROWhidG9PYzRSYVc0OURRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3a11403-fb0c-4451-9d0c-953389e14d4b", "record_id": "flaws_cloudtrail:0000023:b3a11403-fb0c-4451-9d0c-953389e14d4b", "row_index": 23, "timestamp": "2017-02-28T21:43:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3a11403-fb0c-4451-9d0c-953389e14d4b", "eventTime": "2017-02-28T21:43:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIrd1hrWk5VcUUxS2F3M20rbEV6S1loK0x2aW5HbktKQlBrUkVYNUdwZ1o1QnVqbGhvMUpwTTMrZXRyMnI5WFBVNDFPQ0MzMzIvbTJPWWFoREI1dUY4K28xYm5MS05RRXl0VGJTcXNkb3NHekx0UkJtOVQyNzJnQ1oySjdzbTZPdktrMjYxM3hLZTd4bTFCT05BQ3F6T3c9PSIsImkiOiJMcmxMNWNFbTVseUxKWmVwWmp5Q2FnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27eeeac4-4cdf-4388-a13b-3d78f46a31cb", "record_id": "flaws_cloudtrail:0000024:27eeeac4-4cdf-4388-a13b-3d78f46a31cb", "row_index": 24, "timestamp": "2017-02-28T21:43:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27eeeac4-4cdf-4388-a13b-3d78f46a31cb", "eventTime": "2017-02-28T21:43:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ2ckVBWnFqMlN5MC9vTU1hejZQSnhxMTRvY2ZIaWJnWWpWdnF5aWlxWHJLL09UVm9peDEvU1owT3dJeis2OU1FY1ZVUHl4NlBuWWRpWDhNZmdqUXc1VUhYdEUzNHV4dWlFWEhKbTRuLzBOSFFFOHo1bis4bGdPYmVSRlpiSjBpWXNLMDFqMWNkVUczcGhTZGt2bTkvR0E9PSIsImkiOiIzNjJIY0tRbkhJL1dCVkdJSXRNbW9RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "661595ead-3ef8-45bb-911b-26c03bbcaaea", "record_id": "flaws_cloudtrail:0000025:661595ead-3ef8-45bb-911b-26c03bbcaaea", "row_index": 25, "timestamp": "2017-02-28T21:43:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "661595ead-3ef8-45bb-911b-26c03bbcaaea", "eventTime": "2017-02-28T21:43:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ2QjVYWmVBam5NY3pLY0hsb1BoY2U2blBDNmdUSk5RdU1Ya1lBdUZ1MTlxcDYwVHpvdmJwMk50VWE3RERRVy9jWXRkN2lxUHlNbUpvS3U0eUppYVYrTjhvL1FGZVVuL1F6TnZLeW04aVdSTExWc0RsSmM0TzlqQVUzRDRhWVNDaGJ1SGV0clJlSitvbU1McjlvMzRHQ3c9PSIsImkiOiIzUWMwWXVtV3duYWJlWDFoOUc1TDRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fe27c97-be93-4097-ba30-f193f8a167057", "record_id": "flaws_cloudtrail:0000026:0fe27c97-be93-4097-ba30-f193f8a167057", "row_index": 26, "timestamp": "2017-02-28T21:43:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fe27c97-be93-4097-ba30-f193f8a167057", "eventTime": "2017-02-28T21:43:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4589e8c-d7da-495d-ab95-4cd41d39a1ec", "record_id": "flaws_cloudtrail:0000027:d4589e8c-d7da-495d-ab95-4cd41d39a1ec", "row_index": 27, "timestamp": "2017-02-28T21:43:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4589e8c-d7da-495d-ab95-4cd41d39a1ec", "eventTime": "2017-02-28T21:43:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJGK2tPcXhQenY1dU8raU1uVDhuZ1ZRYW1md1hqV2JmaTJoSVFkR29xcE85YVFrODQ2WGFmRk5GaFVlWFNSaW90aTZDc2QwaTg2VFpHdElENDFSSi9lL3R3c1I5MzJSdzZId0NZWmdWdzZTZ3pjK3VBS3Fpd1dHM2oza0N0b3dydENWbTJsWXhjZWxYSmxzbzlpLzhleGc9PSIsImkiOiJkcEpuVUVBTnp5dThBbWtpdy9uZ2lnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "106a2c4d-073d-4be8-a73a-2f0adde900aa", "record_id": "flaws_cloudtrail:0000028:106a2c4d-073d-4be8-a73a-2f0adde900aa", "row_index": 28, "timestamp": "2017-02-28T21:43:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "106a2c4d-073d-4be8-a73a-2f0adde900aa", "eventTime": "2017-02-28T21:43:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1a8642-21f4-4c38-b55b-11277034d67b", "record_id": "flaws_cloudtrail:0000029:1a1a8642-21f4-4c38-b55b-11277034d67b", "row_index": 29, "timestamp": "2017-02-28T21:43:55Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1a8642-21f4-4c38-b55b-11277034d67b", "eventTime": "2017-02-28T21:43:55Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a1a8642-21f4-4c38-b55b-11277034d67b", "record_id": "flaws_cloudtrail:0000030:1a1a8642-21f4-4c38-b55b-11277034d67b", "row_index": 30, "timestamp": "2017-02-28T21:43:55Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a1a8642-21f4-4c38-b55b-11277034d67b", "eventTime": "2017-02-28T21:43:55Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9bbc59c-f984-4003-a6c4-d504af40686e", "record_id": "flaws_cloudtrail:0000031:a9bbc59c-f984-4003-a6c4-d504af40686e", "row_index": 31, "timestamp": "2017-02-28T21:45:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9bbc59c-f984-4003-a6c4-d504af40686e", "eventTime": "2017-02-28T21:45:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "335154b3a-53b2-4d4c-8f3e-53e99053b327", "record_id": "flaws_cloudtrail:0000032:335154b3a-53b2-4d4c-8f3e-53e99053b327", "row_index": 32, "timestamp": "2017-02-28T21:47:15Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "335154b3a-53b2-4d4c-8f3e-53e99053b327", "eventTime": "2017-02-28T21:47:15Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14f767a4-7c05-4554-ac44-c8b8fd1e32e4", "record_id": "flaws_cloudtrail:0000033:14f767a4-7c05-4554-ac44-c8b8fd1e32e4", "row_index": 33, "timestamp": "2017-02-28T21:48:56Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA6OOKWT2M5HCTX5D0", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "9.205.191.143", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14f767a4-7c05-4554-ac44-c8b8fd1e32e4", "eventTime": "2017-02-28T21:48:56Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "9.205.191.143", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6OOKWT2M5HCTX5D0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-28T19:48:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2017/02/28/[$LATEST]31feb0131684fc7b41286cdd90821688", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e7f24c6-96cc-4eef-bb00-7a90369a2", "record_id": "flaws_cloudtrail:0000034:1e7f24c6-96cc-4eef-bb00-7a90369a2", "row_index": 34, "timestamp": "2017-02-28T22:05:41Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e7f24c6-96cc-4eef-bb00-7a90369a2", "eventTime": "2017-02-28T22:05:41Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1e7f24c6-96cc-4eef-bb00-7a90369a2", "record_id": "flaws_cloudtrail:0000035:1e7f24c6-96cc-4eef-bb00-7a90369a2", "row_index": 35, "timestamp": "2017-02-28T22:05:41Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 665, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1e7f24c6-96cc-4eef-bb00-7a90369a2", "eventTime": "2017-02-28T22:05:41Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dc1a81f-b860-4799-b475-dce8f7223be4", "record_id": "flaws_cloudtrail:0000036:5dc1a81f-b860-4799-b475-dce8f7223be4", "row_index": 36, "timestamp": "2017-02-28T22:06:24Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dc1a81f-b860-4799-b475-dce8f7223be4", "eventTime": "2017-02-28T22:06:24Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c60cb5a-0077-440a-8b3a-6c81a6691893", "record_id": "flaws_cloudtrail:0000037:4c60cb5a-0077-440a-8b3a-6c81a6691893", "row_index": 37, "timestamp": "2017-02-28T22:07:26Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c60cb5a-0077-440a-8b3a-6c81a6691893", "eventTime": "2017-02-28T22:07:26Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c60cb5a-0077-440a-8b3a-6c81a6691893", "record_id": "flaws_cloudtrail:0000038:4c60cb5a-0077-440a-8b3a-6c81a6691893", "row_index": 38, "timestamp": "2017-02-28T22:07:26Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c60cb5a-0077-440a-8b3a-6c81a6691893", "eventTime": "2017-02-28T22:07:26Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a9032b2-ca1c-4475-8537-d7bb263d404b", "record_id": "flaws_cloudtrail:0000039:8a9032b2-ca1c-4475-8537-d7bb263d404b", "row_index": 39, "timestamp": "2017-02-28T22:09:07Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a9032b2-ca1c-4475-8537-d7bb263d404b", "eventTime": "2017-02-28T22:09:07Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ccfdd01-79ad-40b1-838e-c23121ba028e", "record_id": "flaws_cloudtrail:0000040:6ccfdd01-79ad-40b1-838e-c23121ba028e", "row_index": 40, "timestamp": "2017-02-28T22:10:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ccfdd01-79ad-40b1-838e-c23121ba028e", "eventTime": "2017-02-28T22:10:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35fd4779-c431-476d-8f9a-81652355fa3b", "record_id": "flaws_cloudtrail:0000041:35fd4779-c431-476d-8f9a-81652355fa3b", "row_index": 41, "timestamp": "2017-02-28T22:11:36Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "39.7.71.21", "user_agent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35fd4779-c431-476d-8f9a-81652355fa3b", "eventTime": "2017-02-28T22:11:36Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "39.7.71.21", "userAgent": "aws-cli/1.11.40 Python/3.5.2 Linux/4.8.16-200.fc24.x86_64 botocore/1.5.3", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f78e612-4c3c-4eec-bb96-f181baab9304", "record_id": "flaws_cloudtrail:0000042:9f78e612-4c3c-4eec-bb96-f181baab9304", "row_index": 42, "timestamp": "2017-02-28T22:14:35Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "[Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 639, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f78e612-4c3c-4eec-bb96-f181baab9304", "eventTime": "2017-02-28T22:14:35Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "[Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f373eb6b-36c0-4b4e-802c-8614cfd966f0", "record_id": "flaws_cloudtrail:0000043:f373eb6b-36c0-4b4e-802c-8614cfd966f0", "row_index": 43, "timestamp": "2017-02-28T22:14:39Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f373eb6b-36c0-4b4e-802c-8614cfd966f0", "eventTime": "2017-02-28T22:14:39Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd21cc3a-d109-4125-8ced-214d45da4c49", "record_id": "flaws_cloudtrail:0000044:dd21cc3a-d109-4125-8ced-214d45da4c49", "row_index": 44, "timestamp": "2017-02-28T22:14:40Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd21cc3a-d109-4125-8ced-214d45da4c49", "eventTime": "2017-02-28T22:14:40Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: lightsail:GetInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdc778f7-f05b-407b-8e2a-144b35b96045", "record_id": "flaws_cloudtrail:0000045:fdc778f7-f05b-407b-8e2a-144b35b96045", "row_index": 45, "timestamp": "2017-02-28T22:14:41Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 831, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdc778f7-f05b-407b-8e2a-144b35b96045", "eventTime": "2017-02-28T22:14:41Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: dynamodb:ListTables on resource: *", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1d31696-2237-461a-91aa-eb2b821a94aa", "record_id": "flaws_cloudtrail:0000046:e1d31696-2237-461a-91aa-eb2b821a94aa", "row_index": 46, "timestamp": "2017-02-28T22:15:29Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIAQ5L3V1SQ2JRQYHLV", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 1109, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1d31696-2237-461a-91aa-eb2b821a94aa", "eventTime": "2017-02-28T22:15:29Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIAQ5L3V1SQ2JRQYHLV", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-28T21:29:41Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "responseElements": {"userId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "account": "811596193553", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aed1d6d4-9644-496c-a75d-87d38f900815", "record_id": "flaws_cloudtrail:0000047:aed1d6d4-9644-496c-a75d-87d38f900815", "row_index": 47, "timestamp": "2017-02-28T22:16:38Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 634, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aed1d6d4-9644-496c-a75d-87d38f900815", "eventTime": "2017-02-28T22:16:38Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb75a80e-2044-43dd-83c2-b58cda821da4", "record_id": "flaws_cloudtrail:0000048:cb75a80e-2044-43dd-83c2-b58cda821da4", "row_index": 48, "timestamp": "2017-02-28T22:18:18Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb75a80e-2044-43dd-83c2-b58cda821da4", "eventTime": "2017-02-28T22:18:18Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a24784d5-3047-4bb3-9e10-1e57b72913f", "record_id": "flaws_cloudtrail:0000049:a24784d5-3047-4bb3-9e10-1e57b72913f", "row_index": 49, "timestamp": "2017-02-28T22:19:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 659, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a24784d5-3047-4bb3-9e10-1e57b72913f", "eventTime": "2017-02-28T22:19:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34c761730-1cb5-4e06-bd77-82ae0d524d72", "record_id": "flaws_cloudtrail:0000050:34c761730-1cb5-4e06-bd77-82ae0d524d72", "row_index": 50, "timestamp": "2017-02-28T22:19:13Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34c761730-1cb5-4e06-bd77-82ae0d524d72", "eventTime": "2017-02-28T22:19:13Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fe4e0f1-e7c7-49cb-8387-ba3bcf1144ac", "record_id": "flaws_cloudtrail:0000051:8fe4e0f1-e7c7-49cb-8387-ba3bcf1144ac", "row_index": 51, "timestamp": "2017-02-28T22:19:14Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fe4e0f1-e7c7-49cb-8387-ba3bcf1144ac", "eventTime": "2017-02-28T22:19:14Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a07fbbf6-281f-4ea9-9174-0093b036f6df", "record_id": "flaws_cloudtrail:0000052:a07fbbf6-281f-4ea9-9174-0093b036f6df", "row_index": 52, "timestamp": "2017-02-28T22:19:14Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a07fbbf6-281f-4ea9-9174-0093b036f6df", "eventTime": "2017-02-28T22:19:14Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b667845-b91e-439c-b56f-164e0c586051", "record_id": "flaws_cloudtrail:0000053:b667845-b91e-439c-b56f-164e0c586051", "row_index": 53, "timestamp": "2017-02-28T22:20:05Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "[aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b667845-b91e-439c-b56f-164e0c586051", "eventTime": "2017-02-28T22:20:05Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "[aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56e3f3f6-85fe-4097-9464-5cb8b45c145f", "record_id": "flaws_cloudtrail:0000054:56e3f3f6-85fe-4097-9464-5cb8b45c145f", "row_index": 54, "timestamp": "2017-02-28T22:20:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "231.255.250.255", "user_agent": "aws-cli/1.11.56 Python/3.6.0 Linux/4.9.11-1-ARCH botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56e3f3f6-85fe-4097-9464-5cb8b45c145f", "eventTime": "2017-02-28T22:20:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "231.255.250.255", "userAgent": "aws-cli/1.11.56 Python/3.6.0 Linux/4.9.11-1-ARCH botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d388122-9be7-4a91-9c88-379834d06f01a", "record_id": "flaws_cloudtrail:0000055:d388122-9be7-4a91-9c88-379834d06f01a", "row_index": 55, "timestamp": "2017-02-28T22:20:53Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 660, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d388122-9be7-4a91-9c88-379834d06f01a", "eventTime": "2017-02-28T22:20:53Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d357e8c0-47d5-45b1-884d-2915351d3f27", "record_id": "flaws_cloudtrail:0000056:d357e8c0-47d5-45b1-884d-2915351d3f27", "row_index": 56, "timestamp": "2017-02-28T22:20:59Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d357e8c0-47d5-45b1-884d-2915351d3f27", "eventTime": "2017-02-28T22:20:59Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1656c937-882b-4f83-b78c-c594f075aab6", "record_id": "flaws_cloudtrail:0000057:1656c937-882b-4f83-b78c-c594f075aab6", "row_index": 57, "timestamp": "2017-02-28T22:21:49Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1656c937-882b-4f83-b78c-c594f075aab6", "eventTime": "2017-02-28T22:21:49Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b31577ff-039f-4c86-af37-a9cfe41a8488", "record_id": "flaws_cloudtrail:0000058:b31577ff-039f-4c86-af37-a9cfe41a8488", "row_index": 58, "timestamp": "2017-02-28T22:22:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "231.255.250.255", "user_agent": "aws-cli/1.11.56 Python/3.6.0 Linux/4.9.11-1-ARCH botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 792, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b31577ff-039f-4c86-af37-a9cfe41a8488", "eventTime": "2017-02-28T22:22:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "231.255.250.255", "userAgent": "aws-cli/1.11.56 Python/3.6.0 Linux/4.9.11-1-ARCH botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4573c75-327e-40d7-9ba2-1fe2655cdaf9", "record_id": "flaws_cloudtrail:0000059:e4573c75-327e-40d7-9ba2-1fe2655cdaf9", "row_index": 59, "timestamp": "2017-02-28T22:22:16Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4573c75-327e-40d7-9ba2-1fe2655cdaf9", "eventTime": "2017-02-28T22:22:16Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name list_apigateways cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "list_apigateways", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd299de0-9446-4669-b741-65f3bbadd620", "record_id": "flaws_cloudtrail:0000060:fd299de0-9446-4669-b741-65f3bbadd620", "row_index": 60, "timestamp": "2017-02-28T22:22:21Z", "event_type": "GetUserPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd299de0-9446-4669-b741-65f3bbadd620", "eventTime": "2017-02-28T22:22:21Z", "eventName": "GetUserPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The user policy with name list_SecurityAudit cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "list_SecurityAudit", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b21f21a-caff-420c-aa26-d958d6880fe5", "record_id": "flaws_cloudtrail:0000061:0b21f21a-caff-420c-aa26-d958d6880fe5", "row_index": 61, "timestamp": "2017-02-28T22:22:57Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b21f21a-caff-420c-aa26-d958d6880fe5", "eventTime": "2017-02-28T22:22:57Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b6afb5e-668e-482e-bf7b-152561de1b7a", "record_id": "flaws_cloudtrail:0000062:4b6afb5e-668e-482e-bf7b-152561de1b7a", "row_index": 62, "timestamp": "2017-02-28T22:23:12Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b6afb5e-668e-482e-bf7b-152561de1b7a", "eventTime": "2017-02-28T22:23:12Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1002fd0a-8a51-4cc0-a548-6ad42ea0a6cf", "record_id": "flaws_cloudtrail:0000063:1002fd0a-8a51-4cc0-a548-6ad42ea0a6cf", "row_index": 63, "timestamp": "2017-02-28T22:23:47Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1002fd0a-8a51-4cc0-a548-6ad42ea0a6cf", "eventTime": "2017-02-28T22:23:47Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56610b-4ab6-4541-9356-048c1a95bedb", "record_id": "flaws_cloudtrail:0000064:56610b-4ab6-4541-9356-048c1a95bedb", "row_index": 64, "timestamp": "2017-02-28T22:23:59Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56610b-4ab6-4541-9356-048c1a95bedb", "eventTime": "2017-02-28T22:23:59Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v9"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b5134a6-9f76-4f8c-a377-574453d4dec12", "record_id": "flaws_cloudtrail:0000065:8b5134a6-9f76-4f8c-a377-574453d4dec12", "row_index": 65, "timestamp": "2017-02-28T22:24:00Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b5134a6-9f76-4f8c-a377-574453d4dec12", "eventTime": "2017-02-28T22:24:00Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38d954473-e280-468f-b16a-685a1f6370e8", "record_id": "flaws_cloudtrail:0000066:38d954473-e280-468f-b16a-685a1f6370e8", "row_index": 66, "timestamp": "2017-02-28T22:24:23Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "[aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 646, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38d954473-e280-468f-b16a-685a1f6370e8", "eventTime": "2017-02-28T22:24:23Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "[aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "098249bb6-ff12-4097-bb2f-6b8d184f2efc", "record_id": "flaws_cloudtrail:0000067:098249bb6-ff12-4097-bb2f-6b8d184f2efc", "row_index": 67, "timestamp": "2017-02-28T22:25:25Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "098249bb6-ff12-4097-bb2f-6b8d184f2efc", "eventTime": "2017-02-28T22:25:25Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0c57ecb-372a-4457-9981-3c6490c8d0f3", "record_id": "flaws_cloudtrail:0000068:d0c57ecb-372a-4457-9981-3c6490c8d0f3", "row_index": 68, "timestamp": "2017-02-28T22:25:28Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 662, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0c57ecb-372a-4457-9981-3c6490c8d0f3", "eventTime": "2017-02-28T22:25:28Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd921494-9dd9-4b6e-8c32-5fbb6e8d259e", "record_id": "flaws_cloudtrail:0000069:fd921494-9dd9-4b6e-8c32-5fbb6e8d259e", "row_index": 69, "timestamp": "2017-02-28T22:26:17Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd921494-9dd9-4b6e-8c32-5fbb6e8d259e", "eventTime": "2017-02-28T22:26:17Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6a7035d-2353-4fc0-a928-842f2bc0a0fc", "record_id": "flaws_cloudtrail:0000070:d6a7035d-2353-4fc0-a928-842f2bc0a0fc", "row_index": 70, "timestamp": "2017-02-28T22:26:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6a7035d-2353-4fc0-a928-842f2bc0a0fc", "eventTime": "2017-02-28T22:26:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1f18bf1-0c62-4f0c-83f5-b58999bf", "record_id": "flaws_cloudtrail:0000071:e1f18bf1-0c62-4f0c-83f5-b58999bf", "row_index": 71, "timestamp": "2017-02-28T22:26:58Z", "event_type": "GetRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1f18bf1-0c62-4f0c-83f5-b58999bf", "eventTime": "2017-02-28T22:26:58Z", "eventName": "GetRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eaa1745-ee7a-443d-85bc-f816cf09c072", "record_id": "flaws_cloudtrail:0000072:4eaa1745-ee7a-443d-85bc-f816cf09c072", "row_index": 72, "timestamp": "2017-02-28T22:27:08Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eaa1745-ee7a-443d-85bc-f816cf09c072", "eventTime": "2017-02-28T22:27:08Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d9dc09a-5aa7-4b4d-8843-b30762f44cd", "record_id": "flaws_cloudtrail:0000073:8d9dc09a-5aa7-4b4d-8843-b30762f44cd", "row_index": 73, "timestamp": "2017-02-28T22:27:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d9dc09a-5aa7-4b4d-8843-b30762f44cd", "eventTime": "2017-02-28T22:27:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJSWThkeGxFeWRzQnhqSmcybG9kMGhQN25aSjI2NGd4SDhPV0ZxemNwYkJ1NENVbU53NFQrSFJCcm05VFJCSmFNMnZKL29rYkVCYU5nbjY5NTU3R0xGeUtRMEJVcXBmYnl6blpBZmFuMXV5Z2pYd1gvNzAwUWNHVlFYZFlJZ05wS3A5MklhaFZORWR1a2t2L0VyenJaNUE9PSIsImkiOiJvZGtxaVcvclVLZkw0dlVRMVNZdUV3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e7b82b-a87d-4a6f-93e8-a2b807f6aee6", "record_id": "flaws_cloudtrail:0000074:23e7b82b-a87d-4a6f-93e8-a2b807f6aee6", "row_index": 74, "timestamp": "2017-02-28T22:27:12Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e7b82b-a87d-4a6f-93e8-a2b807f6aee6", "eventTime": "2017-02-28T22:27:12Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJLbWd1N1BwcU5BTDRUWW5uYnRQRThWN0kxdHhYWklsRVBiS01DN05OeVpNMXhWdTZha2VlKzBpdHRTajNHOHdYbGdld2JtTG5TUUJjR2JROENJOGNXSVU0VGpyc1h0eVIwK2JWN3U1TjQ0aE1ZZW9CbGhtNEgxYmM3WDhQK0xteHdZcFB6RFlDZDBRb3ZBQlNydUVDY3c9PSIsImkiOiJ1UWNNdEdxRHk1OHlnU0VqUUV5aEVRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "027afd66-3492-48cb-b030-6b890857a28b", "record_id": "flaws_cloudtrail:0000075:027afd66-3492-48cb-b030-6b890857a28b", "row_index": 75, "timestamp": "2017-02-28T22:27:14Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "027afd66-3492-48cb-b030-6b890857a28b", "eventTime": "2017-02-28T22:27:14Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2c3235f-bd08-4a49-b367-fd3bb9143e38", "record_id": "flaws_cloudtrail:0000076:c2c3235f-bd08-4a49-b367-fd3bb9143e38", "row_index": 76, "timestamp": "2017-02-28T22:27:15Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2c3235f-bd08-4a49-b367-fd3bb9143e38", "eventTime": "2017-02-28T22:27:15Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJWUHNhb0lzV3Fjck84aXB1OTZzV1RJNHRObzFWUnpUUEhMYytkRkN2UHJDZGxzNTZpQzlQSmRTWnBPdHdFR29LNmNqY1BYRkl3Mk9jODZVVE96dEptZUVsNlhRbGhPTStQZ2ZtYTJudm9VWVdIMXN3aWVISjN4Q01LNGdHMXNsZklLdVdjOER4NXgzMkMySkpJODI4eHc9PSIsImkiOiJseXVnanpyVnkrZ1dkOUNRbVR0T2VBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ddfc044-8f20-4a26-a94f-d2b4f6fb5199", "record_id": "flaws_cloudtrail:0000077:3ddfc044-8f20-4a26-a94f-d2b4f6fb5199", "row_index": 77, "timestamp": "2017-02-28T22:27:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ddfc044-8f20-4a26-a94f-d2b4f6fb5199", "eventTime": "2017-02-28T22:27:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJIaDBsV1poOU1PZmZaK1pSaEIxdk1zanhqeU1PbkxNRmUzd1lqT0ZwY28rNHBSN256SGNOYWdtZ1k4N0NySUl5QVlBSDZTOEhqYmNmQzlyMThCd1Z4UFVOTEFQaDVqVkQxTi92TkNZSzBhVjNyLytEZGFsblJ3aFlvUFcycGU2QkliT0RwaitrMlVJOE0vT0pFZDkzcVE9PSIsImkiOiJoaWpjZEZQT0tHenR2dlJuL01mb1lRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd7228b-ab14-4293-83de-7e38d346d92a", "record_id": "flaws_cloudtrail:0000078:4dd7228b-ab14-4293-83de-7e38d346d92a", "row_index": 78, "timestamp": "2017-02-28T22:27:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd7228b-ab14-4293-83de-7e38d346d92a", "eventTime": "2017-02-28T22:27:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJLZG1ZTVVCRDl2MTR5WnVwUXcxaXRNb1hzNklxTmpZeXhsc2N5eXo1c1RLTjVUd2lVTUhHRGM5QzkwOWwwMmptdHc1aUs0dVZUcndQL0U4eW9mM3F5ZFpxdTUydWFSRnJuUERoNHdNamF0Qk1WTm5aZVF6Y0dqdHhJMGZjVG1WcVdDU0cvekcyWUdFTVRqU0QvazFETEE9PSIsImkiOiJ1YXBmZnF1ODFHSTU1RlZkTXMxTVZnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db5274ed-f6c9-43c4-9935-a86e653de580", "record_id": "flaws_cloudtrail:0000079:db5274ed-f6c9-43c4-9935-a86e653de580", "row_index": 79, "timestamp": "2017-02-28T22:27:21Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1041, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db5274ed-f6c9-43c4-9935-a86e653de580", "eventTime": "2017-02-28T22:27:21Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ0VlVzR0pCd1l6Z3AyRVQyVUtPMFdCYnB2THpMaDM1TXVXTlhGZHhNQW50ZXJ3MGdlOVNQMW9yVUFMOUNZKzBDeFc5UjlIdmZzbmdwa2ZzempnSlEyZldQR2N3SzlhZHZGZ051SnJYSzFCeW10SEVmbmgrRFkwV2hMZ2VGSDNSQWpKVTNnTmlYSm82dVBrNHlkb3o3dnc9PSIsImkiOiJCdFFWMVZVUjE5SFptYkRpcy81Nll3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f13ba28-0757-46d7-af59-f1820b8350d0", "record_id": "flaws_cloudtrail:0000080:7f13ba28-0757-46d7-af59-f1820b8350d0", "row_index": 80, "timestamp": "2017-02-28T22:27:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f13ba28-0757-46d7-af59-f1820b8350d0", "eventTime": "2017-02-28T22:27:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJid2lIckNDZGFINmZON3cxUDlFZzlaVFRUUEZlVDFWanlOUUpsYXcvelg3eUVWMzZ1Mmt3dFJUTlpoeVJScjcxcUppWjg0RjZ1Z0dFTlVZMHlDY24rTVZYcnc5cDJyZm9tMS9RSWJQbnBrQWlweDJyTHB0eDNhWGpnYi9sTlJIQzFmc0JpTWNwSVg3MVAxN3IxcGdrU0E9PSIsImkiOiJkUXUyRVdvSm9WaG9MbkVZZm1HYXZnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb655b34-1ee9-4947-8527-10d7aaff279a", "record_id": "flaws_cloudtrail:0000081:cb655b34-1ee9-4947-8527-10d7aaff279a", "row_index": 81, "timestamp": "2017-02-28T22:27:36Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb655b34-1ee9-4947-8527-10d7aaff279a", "eventTime": "2017-02-28T22:27:36Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8669bd3-717a-48f1-8a76-6d26f30d23c1", "record_id": "flaws_cloudtrail:0000082:c8669bd3-717a-48f1-8a76-6d26f30d23c1", "row_index": 82, "timestamp": "2017-02-28T22:27:43Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8669bd3-717a-48f1-8a76-6d26f30d23c1", "eventTime": "2017-02-28T22:27:43Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7d89e90-a431-498d-8297-b38a3e5271ea", "record_id": "flaws_cloudtrail:0000083:f7d89e90-a431-498d-8297-b38a3e5271ea", "row_index": 83, "timestamp": "2017-02-28T22:28:19Z", "event_type": "ListAttachedRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7d89e90-a431-498d-8297-b38a3e5271ea", "eventTime": "2017-02-28T22:28:19Z", "eventName": "ListAttachedRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35dcddea-a353-45a3-8498-635885edc", "record_id": "flaws_cloudtrail:0000084:35dcddea-a353-45a3-8498-635885edc", "row_index": 84, "timestamp": "2017-02-28T22:28:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35dcddea-a353-45a3-8498-635885edc", "eventTime": "2017-02-28T22:28:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2691aeec-b8e1-4648-8f93-06893a70f183", "record_id": "flaws_cloudtrail:0000085:2691aeec-b8e1-4648-8f93-06893a70f183", "row_index": 85, "timestamp": "2017-02-28T22:29:30Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "[aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 641, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2691aeec-b8e1-4648-8f93-06893a70f183", "eventTime": "2017-02-28T22:29:30Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "[aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36a8b8c2-c1cf-4575-b794-46c581e0c0e4", "record_id": "flaws_cloudtrail:0000086:36a8b8c2-c1cf-4575-b794-46c581e0c0e4", "row_index": 86, "timestamp": "2017-02-28T22:29:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "231.255.250.255", "user_agent": "aws-cli/1.11.56 Python/3.6.0 Linux/4.9.11-1-ARCH botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36a8b8c2-c1cf-4575-b794-46c581e0c0e4", "eventTime": "2017-02-28T22:29:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "231.255.250.255", "userAgent": "aws-cli/1.11.56 Python/3.6.0 Linux/4.9.11-1-ARCH botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d781188f-6cf6-4d04-a260-3fd1b902f135", "record_id": "flaws_cloudtrail:0000087:2d781188f-6cf6-4d04-a260-3fd1b902f135", "row_index": 87, "timestamp": "2017-02-28T22:29:37Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d781188f-6cf6-4d04-a260-3fd1b902f135", "eventTime": "2017-02-28T22:29:37Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03f9c2aa-3d1c-45de-8b6f-63a7403ca6cf", "record_id": "flaws_cloudtrail:0000088:03f9c2aa-3d1c-45de-8b6f-63a7403ca6cf", "row_index": 88, "timestamp": "2017-02-28T22:29:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1473, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03f9c2aa-3d1c-45de-8b6f-63a7403ca6cf", "eventTime": "2017-02-28T22:29:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA2CISGPSR7WSMVO9I", "expiration": "Mar 1, 2017 5:01:08 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64c6e8d1-bec3-4316-bd88-00f6b0f06a05", "record_id": "flaws_cloudtrail:0000089:64c6e8d1-bec3-4316-bd88-00f6b0f06a05", "row_index": 89, "timestamp": "2017-02-28T22:29:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "231.255.250.255", "user_agent": "aws-cli/1.11.56 Python/3.6.0 Linux/4.9.11-1-ARCH botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64c6e8d1-bec3-4316-bd88-00f6b0f06a05", "eventTime": "2017-02-28T22:29:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "231.255.250.255", "userAgent": "aws-cli/1.11.56 Python/3.6.0 Linux/4.9.11-1-ARCH botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {"items": [{"instanceId": "i-aa2d3b42e5c6e801a"}]}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fdcc249-c9ad-41d3-a290-1040b1bd850c", "record_id": "flaws_cloudtrail:0000090:8fdcc249-c9ad-41d3-a290-1040b1bd850c", "row_index": 90, "timestamp": "2017-02-28T22:32:35Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fdcc249-c9ad-41d3-a290-1040b1bd850c", "eventTime": "2017-02-28T22:32:35Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90a050cd-ccd9-49ad-91ce-5938bdf2b2b4", "record_id": "flaws_cloudtrail:0000091:90a050cd-ccd9-49ad-91ce-5938bdf2b2b4", "row_index": 91, "timestamp": "2017-02-28T22:33:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "[aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90a050cd-ccd9-49ad-91ce-5938bdf2b2b4", "eventTime": "2017-02-28T22:33:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "[aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad5afbdf-be7d-4063-85f8-4510daa39abb", "record_id": "flaws_cloudtrail:0000092:ad5afbdf-be7d-4063-85f8-4510daa39abb", "row_index": 92, "timestamp": "2017-02-28T22:33:13Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad5afbdf-be7d-4063-85f8-4510daa39abb", "eventTime": "2017-02-28T22:33:13Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa1d73c1-46ae-44b2-baa3-f285c7bf51fb", "record_id": "flaws_cloudtrail:0000093:aa1d73c1-46ae-44b2-baa3-f285c7bf51fb", "row_index": 93, "timestamp": "2017-02-28T22:33:20Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa1d73c1-46ae-44b2-baa3-f285c7bf51fb", "eventTime": "2017-02-28T22:33:20Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42030a1-5ea1-44f3-a457-5094ab139d6e", "record_id": "flaws_cloudtrail:0000094:42030a1-5ea1-44f3-a457-5094ab139d6e", "row_index": 94, "timestamp": "2017-02-28T22:34:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42030a1-5ea1-44f3-a457-5094ab139d6e", "eventTime": "2017-02-28T22:34:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fbf19d6-6de6-41e3-8814-624760f6f", "record_id": "flaws_cloudtrail:0000095:1fbf19d6-6de6-41e3-8814-624760f6f", "row_index": 95, "timestamp": "2017-02-28T22:34:42Z", "event_type": "ListAliases202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fbf19d6-6de6-41e3-8814-624760f6f", "eventTime": "2017-02-28T22:34:42Z", "eventName": "ListAliases202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:ListAliases on resource: arn:aws:lambda:us-west-2:811596193553:function:Level", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56aeddf7-cfc4-4148-8a57-78d67bc07b10", "record_id": "flaws_cloudtrail:0000096:56aeddf7-cfc4-4148-8a57-78d67bc07b10", "row_index": 96, "timestamp": "2017-02-28T22:34:44Z", "event_type": "ListAliases202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56aeddf7-cfc4-4148-8a57-78d67bc07b10", "eventTime": "2017-02-28T22:34:44Z", "eventName": "ListAliases202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:ListAliases on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3844b56-72dd-4d0a-8831-3cdc12596e2", "record_id": "flaws_cloudtrail:0000097:e3844b56-72dd-4d0a-8831-3cdc12596e2", "row_index": 97, "timestamp": "2017-02-28T22:35:08Z", "event_type": "GetFunction202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3844b56-72dd-4d0a-8831-3cdc12596e2", "eventTime": "2017-02-28T22:35:08Z", "eventName": "GetFunction202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44ef448a-76b3-4e0e-b407-92d8e39ff87e", "record_id": "flaws_cloudtrail:0000098:44ef448a-76b3-4e0e-b407-92d8e39ff87e", "row_index": 98, "timestamp": "2017-02-28T22:35:25Z", "event_type": "ListVersionsByFunction202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 898, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44ef448a-76b3-4e0e-b407-92d8e39ff87e", "eventTime": "2017-02-28T22:35:25Z", "eventName": "ListVersionsByFunction202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:ListVersionsByFunction on resource: arn:aws:lambda:us-west-2:811596193553:function:Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29ba38e4-d23a-4c5e-85e4-d1fcc20a834c", "record_id": "flaws_cloudtrail:0000099:29ba38e4-d23a-4c5e-85e4-d1fcc20a834c", "row_index": 99, "timestamp": "2017-02-28T22:36:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29ba38e4-d23a-4c5e-85e4-d1fcc20a834c", "eventTime": "2017-02-28T22:36:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dc032945-299d-4cf4-886d-eede0fdc86cc", "record_id": "flaws_cloudtrail:0000100:5dc032945-299d-4cf4-886d-eede0fdc86cc", "row_index": 100, "timestamp": "2017-02-28T22:36:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1055, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dc032945-299d-4cf4-886d-eede0fdc86cc", "eventTime": "2017-02-28T22:36:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJONzlQTEVPUTRjOXpJNFlnU0g0cm9XcDlCc25IUnZ2WHB3Zk9VR2RLeDYrRFRzclZBYU9ZKzhvd1FUWEc3S05kNmxOM2lEQ1dESTk0Ymh4dWtGbHBBQ0M2RGxPQ1gyQngzbGh4ZzFGayttdlZkbGZLcTRSMmlxaFd4ZUU5d3U1Umg4NzVDcjFkanBqby8wZEpGMUdDOXc9PSIsImkiOiJOQWczOFZkb0NCTi93amlnUldrMkdBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9d92608-b028-4f5c-9f00-0d0ea6160fc7", "record_id": "flaws_cloudtrail:0000101:a9d92608-b028-4f5c-9f00-0d0ea6160fc7", "row_index": 101, "timestamp": "2017-02-28T22:36:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9d92608-b028-4f5c-9f00-0d0ea6160fc7", "eventTime": "2017-02-28T22:36:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiI4SFQvS2k4Smprc20wNDdMbnMwR09uUUE0eVVRMTB6MG9wRkw1N3ZWZTV4eCtMZTQvejgvaGllUTBPMEVCcnBIY0Q0Uk14b3EzelRrTnB6NkpOc0tHT3d6ZVVNNzY1UzBacXVXRzJLRVJPWGkrV3czR1VxOW9wZ3BDVE1TWlhXZXdWTEVTN0UrWVdFem1PZHJ0L2htd1E9PSIsImkiOiJvNzNOcWZSaDArNjNMOHhOUkllL3J3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8af64655-0f8c-4be2-a6df-5427ff7987f1", "record_id": "flaws_cloudtrail:0000102:8af64655-0f8c-4be2-a6df-5427ff7987f1", "row_index": 102, "timestamp": "2017-02-28T22:36:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8af64655-0f8c-4be2-a6df-5427ff7987f1", "eventTime": "2017-02-28T22:36:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ5VmlHYWdqUDRaVXZieTVkV0ZyZ0RrajFHQ082M0RlNlUyT29uczY0VTdZUXZDak1wQjl3czIwVGlsQ0lXeEhGM2xNVHZPSDBXU3ZXZFNERDlvL056TWcxVDd6VlBqZGo4cTFZRkRqVkNsb2ZOZWxpL1E4OTc4WXo1WldlSDlDUTR1Z3B0RFo4cnZ0dTNTMm9LWFJtbGc9PSIsImkiOiJuUWcwU3FxS2IvUXJLQjZJek9FMElRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22ef4c19-e165-437a-b48f-425df5d62c66", "record_id": "flaws_cloudtrail:0000103:22ef4c19-e165-437a-b48f-425df5d62c66", "row_index": 103, "timestamp": "2017-02-28T22:36:32Z", "event_type": "GetAccountSettings08306", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 822, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22ef4c19-e165-437a-b48f-425df5d62c66", "eventTime": "2017-02-28T22:36:32Z", "eventName": "GetAccountSettings08306", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lambda:GetAccountSettings", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85779b06-941d-4fa9-86c5-1208cc7c5069", "record_id": "flaws_cloudtrail:0000104:85779b06-941d-4fa9-86c5-1208cc7c5069", "row_index": 104, "timestamp": "2017-02-28T22:36:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85779b06-941d-4fa9-86c5-1208cc7c5069", "eventTime": "2017-02-28T22:36:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIyeWU3UEd1cTdkcTdOaCtlL2xwQU9Ob3R0LzZ0Wlk2azY3RDRFTWFYT1ZHVWVTbHplaE1KdEhGeFlOUFFMbDcrd2E2SDVCMFp5RHc5d1k3SURYc1VoZnl1aWVMYUNlbUQrdWsxdE9RbmZzVVJ6OGlBb214eUt3N05zNFp1QWxIT2w3K3M3ajdOeXpuSVdmMUJwUVpsQmc9PSIsImkiOiJwV3dmZ3BXUnFxcWRLNTZyZWQ1MUpBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4e3579a-3ae1-4fb1-9bd3-da50a7244ca3", "record_id": "flaws_cloudtrail:0000105:e4e3579a-3ae1-4fb1-9bd3-da50a7244ca3", "row_index": 105, "timestamp": "2017-02-28T22:36:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4e3579a-3ae1-4fb1-9bd3-da50a7244ca3", "eventTime": "2017-02-28T22:36:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJCNUxvRXpQYmRUWGV6M05zalArOWp5TGthTDJkU1N6d1A2Q051eXd6aG5DL3pzVUxIZDR2TFl1a3JtQVpsb1hYOUlwdUpSQXlDS3JjRG12UGlYUTFpdE9iQTMwL01tYVRGN1YxWXhZMlFtVlJmVzB6WGpDM3lvamsrOUFwMHZnV2YvY1c3UGhnRy9YMzM0UjFrcTduaWc9PSIsImkiOiJDY2FCZWpoeGNCVFY1c3pSVmVRNUlBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd25114c-2f6e-4c65-b052-ad27fb982997", "record_id": "flaws_cloudtrail:0000106:bd25114c-2f6e-4c65-b052-ad27fb982997", "row_index": 106, "timestamp": "2017-02-28T22:36:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd25114c-2f6e-4c65-b052-ad27fb982997", "eventTime": "2017-02-28T22:36:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJpVEVRNngzb280c2o0ZFlQdUVRL0VvOVpZVjFmb0Q4Z1B0K3VFSEM4MGdldy80VjlHZFQzNXduNEpEc1RlRDF1QW51NnJXakdhcFhKSGMwSUpjY3ltYjhFZSsyL2V4VWRzV1VPYmJzNVlLRDR1d2doRXZNV1JIWXltb0pQYndJL2picTQ4a2MybHkxWmhySWZ2Zk14OXc9PSIsImkiOiJ5dUJ1VzEvd3NVUkYwRnpwaVlxdVR3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "862d40b8-3293-4d96-bf0f-696b6fc46950", "record_id": "flaws_cloudtrail:0000107:862d40b8-3293-4d96-bf0f-696b6fc46950", "row_index": 107, "timestamp": "2017-02-28T22:36:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "34.171.255.70", "user_agent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1054, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "862d40b8-3293-4d96-bf0f-696b6fc46950", "eventTime": "2017-02-28T22:36:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "34.171.255.70", "userAgent": "aws-cli/1.11.34 Python/3.5.2 Linux/4.9.8-100.fc24.x86_64 botocore/1.4.91", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ3YXd2Z0NRWC9neDVLMTNQSTNLY21MZ0hHUnBQelhSRTI3WkpoZy80dmpCOFBZMmU3REo1VnBKY3U1RVVmN0IzNTBzdHJvcGFZemNUNjI3Yk54eU1tUjlTK0hsNnFUcjFuZHVhdDB5cWJqSVc1Zk1nNmhDUHVwTERjNDFBUUJlNFc5Ym5UVGZKYk9zOVRHMFlTTFM5cGc9PSIsImkiOiJXUGQzRVl4bVEwVzJGR21YcENqLzNnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "178604c61-a733-4283-86da-95fb0fe9ac45", "record_id": "flaws_cloudtrail:0000108:178604c61-a733-4283-86da-95fb0fe9ac45", "row_index": 108, "timestamp": "2017-02-28T22:37:13Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "178604c61-a733-4283-86da-95fb0fe9ac45", "eventTime": "2017-02-28T22:37:13Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cef4fdc0-2a8d-4854-a8da-a37352005b99", "record_id": "flaws_cloudtrail:0000109:cef4fdc0-2a8d-4854-a8da-a37352005b99", "row_index": 109, "timestamp": "2017-02-28T22:37:51Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "241.253.151.159", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cef4fdc0-2a8d-4854-a8da-a37352005b99", "eventTime": "2017-02-28T22:37:51Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "241.253.151.159", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f00ad791-58bc-4b34-9d75-59b0534ac5d8", "record_id": "flaws_cloudtrail:0000110:f00ad791-58bc-4b34-9d75-59b0534ac5d8", "row_index": 110, "timestamp": "2017-02-28T22:38:50Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f00ad791-58bc-4b34-9d75-59b0534ac5d8", "eventTime": "2017-02-28T22:38:50Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06a2c005-8b4c-458d-a11e-fcfe3039b807", "record_id": "flaws_cloudtrail:0000111:06a2c005-8b4c-458d-a11e-fcfe3039b807", "row_index": 111, "timestamp": "2017-02-28T22:39:43Z", "event_type": "GetRestApi", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "99.105.143.251", "user_agent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06a2c005-8b4c-458d-a11e-fcfe3039b807", "eventTime": "2017-02-28T22:39:43Z", "eventName": "GetRestApi", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "99.105.143.251", "userAgent": "aws-cli/1.11.53 Python/2.7.12 Darwin/15.6.0 botocore/1.5.16", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fffbdd0f-063d-41e9-af5a-9bf5f685dad1", "record_id": "flaws_cloudtrail:0000112:fffbdd0f-063d-41e9-af5a-9bf5f685dad1", "row_index": 112, "timestamp": "2017-02-28T23:00:04Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 634, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fffbdd0f-063d-41e9-af5a-9bf5f685dad1", "eventTime": "2017-02-28T23:00:04Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e724ecfc-9cce-48f9-8b3a-9b47f5bffdc8", "record_id": "flaws_cloudtrail:0000113:e724ecfc-9cce-48f9-8b3a-9b47f5bffdc8", "row_index": 113, "timestamp": "2017-02-28T23:03:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e724ecfc-9cce-48f9-8b3a-9b47f5bffdc8", "eventTime": "2017-02-28T23:03:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bef529444-16bb-47fe-bd51-aee40b6d9e7a", "record_id": "flaws_cloudtrail:0000114:bef529444-16bb-47fe-bd51-aee40b6d9e7a", "row_index": 114, "timestamp": "2017-02-28T23:03:41Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bef529444-16bb-47fe-bd51-aee40b6d9e7a", "eventTime": "2017-02-28T23:03:41Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2db460681-f249-4c37-9596-305a4cf3dfb1", "record_id": "flaws_cloudtrail:0000115:2db460681-f249-4c37-9596-305a4cf3dfb1", "row_index": 115, "timestamp": "2017-02-28T23:03:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2db460681-f249-4c37-9596-305a4cf3dfb1", "eventTime": "2017-02-28T23:03:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b80feb2-c034-43ae-b304-4400f03ebfb4", "record_id": "flaws_cloudtrail:0000116:9b80feb2-c034-43ae-b304-4400f03ebfb4", "row_index": 116, "timestamp": "2017-02-28T23:14:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "[Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 639, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b80feb2-c034-43ae-b304-4400f03ebfb4", "eventTime": "2017-02-28T23:14:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "[Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23154d8-0e9e-4219-acd1-9689ddeb6455", "record_id": "flaws_cloudtrail:0000117:23154d8-0e9e-4219-acd1-9689ddeb6455", "row_index": 117, "timestamp": "2017-02-28T23:14:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14 Resource", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23154d8-0e9e-4219-acd1-9689ddeb6455", "eventTime": "2017-02-28T23:14:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14 Resource", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "609098f3-5985-485e-a69e-a7600d713156", "record_id": "flaws_cloudtrail:0000118:609098f3-5985-485e-a69e-a7600d713156", "row_index": 118, "timestamp": "2017-02-28T23:14:43Z", "event_type": "GetInstances", "event_source": "lightsail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "609098f3-5985-485e-a69e-a7600d713156", "eventTime": "2017-02-28T23:14:43Z", "eventName": "GetInstances", "eventSource": "lightsail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/Level6 is not authorized to perform: lightsail:GetInstances", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b59269-4454-40bc-8168-e5bb79d2c253", "record_id": "flaws_cloudtrail:0000119:5b59269-4454-40bc-8168-e5bb79d2c253", "row_index": 119, "timestamp": "2017-02-28T23:14:43Z", "event_type": "ListTables", "event_source": "dynamodb.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b59269-4454-40bc-8168-e5bb79d2c253", "eventTime": "2017-02-28T23:14:43Z", "eventName": "ListTables", "eventSource": "dynamodb.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "Boto3/1.4.4 Python/2.7.13 Darwin/15.6.0 Botocore/1.5.14", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b56070c5-6a30-4b72-81af-184aa223b91d", "record_id": "flaws_cloudtrail:0000120:b56070c5-6a30-4b72-81af-184aa223b91d", "row_index": 120, "timestamp": "2017-02-28T23:15:37Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b56070c5-6a30-4b72-81af-184aa223b91d", "eventTime": "2017-02-28T23:15:37Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"size": "1", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2c", "volumeType": "gp2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd132f6d-210d-44e1-8613-727eeaff8140", "record_id": "flaws_cloudtrail:0000121:fd132f6d-210d-44e1-8613-727eeaff8140", "row_index": 121, "timestamp": "2017-02-28T23:15:45Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd132f6d-210d-44e1-8613-727eeaff8140", "eventTime": "2017-02-28T23:15:45Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"size": "1", "snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2c", "volumeType": "gp2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a39c13f-d810-44e5-8a2e-c76be8133d0e", "record_id": "flaws_cloudtrail:0000122:4a39c13f-d810-44e5-8a2e-c76be8133d0e", "row_index": 122, "timestamp": "2017-02-28T23:16:12Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 658, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a39c13f-d810-44e5-8a2e-c76be8133d0e", "eventTime": "2017-02-28T23:16:12Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63b4d186-80ef-442a-8a4b-80ef39e2edf2", "record_id": "flaws_cloudtrail:0000123:63b4d186-80ef-442a-8a4b-80ef39e2edf2", "row_index": 123, "timestamp": "2017-02-28T23:16:25Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63b4d186-80ef-442a-8a4b-80ef39e2edf2", "eventTime": "2017-02-28T23:16:25Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51dd11e8-a294-412c-b74b-9938394fed1a", "record_id": "flaws_cloudtrail:0000124:51dd11e8-a294-412c-b74b-9938394fed1a", "row_index": 124, "timestamp": "2017-02-28T23:17:42Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51dd11e8-a294-412c-b74b-9938394fed1a", "eventTime": "2017-02-28T23:17:42Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ac296b3b-834e-44bb-97c2-aee50d09741", "record_id": "flaws_cloudtrail:0000125:ac296b3b-834e-44bb-97c2-aee50d09741", "row_index": 125, "timestamp": "2017-02-28T23:18:16Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ac296b3b-834e-44bb-97c2-aee50d09741", "eventTime": "2017-02-28T23:18:16Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "674a006b-f183-4490-a719-f08cb4b9a60b", "record_id": "flaws_cloudtrail:0000126:674a006b-f183-4490-a719-f08cb4b9a60b", "row_index": 126, "timestamp": "2017-02-28T23:19:13Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "674a006b-f183-4490-a719-f08cb4b9a60b", "eventTime": "2017-02-28T23:19:13Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7eb60b85-5e26-4afa-9dba-aebfec116de5", "record_id": "flaws_cloudtrail:0000127:7eb60b85-5e26-4afa-9dba-aebfec116de5", "row_index": 127, "timestamp": "2017-02-28T23:19:54Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7eb60b85-5e26-4afa-9dba-aebfec116de5", "eventTime": "2017-02-28T23:19:54Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d85e67ba-2a73-4cb3-860e-b81235335ba2", "record_id": "flaws_cloudtrail:0000128:d85e67ba-2a73-4cb3-860e-b81235335ba2", "row_index": 128, "timestamp": "2017-02-28T23:20:22Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "49.251.42.250", "user_agent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d85e67ba-2a73-4cb3-860e-b81235335ba2", "eventTime": "2017-02-28T23:20:22Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "49.251.42.250", "userAgent": "aws-cli/1.11.51 Python/2.7.13 Darwin/15.6.0 botocore/1.5.14", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "363198f9-cca6-4822-b997-127e2632ddad", "record_id": "flaws_cloudtrail:0000129:363198f9-cca6-4822-b997-127e2632ddad", "row_index": 129, "timestamp": "2017-02-28T23:29:42Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1477, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "363198f9-cca6-4822-b997-127e2632ddad", "eventTime": "2017-02-28T23:29:42Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA9MLMFGVI53MIWQQT", "expiration": "Mar 1, 2017 6:04:24 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bfd58c7-737b-4337-a060-636ad986ad14", "record_id": "flaws_cloudtrail:0000130:7bfd58c7-737b-4337-a060-636ad986ad14", "row_index": 130, "timestamp": "2017-02-28T23:30:31Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "96.111.203.115", "user_agent": "[aws-cli/1.5.2 Python/2.7.8 Linux/4.9.0-1-amd64]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 632, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bfd58c7-737b-4337-a060-636ad986ad14", "eventTime": "2017-02-28T23:30:31Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "96.111.203.115", "userAgent": "[aws-cli/1.5.2 Python/2.7.8 Linux/4.9.0-1-amd64]", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "275fdbe3-7d0e-4462-8d6c-6cb9176bc216", "record_id": "flaws_cloudtrail:0000131:275fdbe3-7d0e-4462-8d6c-6cb9176bc216", "row_index": 131, "timestamp": "2017-02-28T23:52:59Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "[aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 640, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "275fdbe3-7d0e-4462-8d6c-6cb9176bc216", "eventTime": "2017-02-28T23:52:59Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "[aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "12147-5f33-47af-ac43-678a183f0263", "record_id": "flaws_cloudtrail:0000132:12147-5f33-47af-ac43-678a183f0263", "row_index": 132, "timestamp": "2017-02-28T23:59:05Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "12147-5f33-47af-ac43-678a183f0263", "eventTime": "2017-02-28T23:59:05Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b00b421c-6628-47f1-8633-a757b70758ed", "record_id": "flaws_cloudtrail:0000133:b00b421c-6628-47f1-8633-a757b70758ed", "row_index": 133, "timestamp": "2017-02-28T23:59:10Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b00b421c-6628-47f1-8633-a757b70758ed", "eventTime": "2017-02-28T23:59:10Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75248cb9-6010-4a3b-bd0a-0288c50ddb70", "record_id": "flaws_cloudtrail:0000134:75248cb9-6010-4a3b-bd0a-0288c50ddb70", "row_index": 134, "timestamp": "2017-03-01T00:02:19Z", "event_type": "ListAccountAliases", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75248cb9-6010-4a3b-bd0a-0288c50ddb70", "eventTime": "2017-03-01T00:02:19Z", "eventName": "ListAccountAliases", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:ListAccountAliases", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6886c650-f29b-4f64-8621-b9149cb09811", "record_id": "flaws_cloudtrail:0000135:6886c650-f29b-4f64-8621-b9149cb09811", "row_index": 135, "timestamp": "2017-03-01T00:02:50Z", "event_type": "CreateAccountAlias", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6886c650-f29b-4f64-8621-b9149cb09811", "eventTime": "2017-03-01T00:02:50Z", "eventName": "CreateAccountAlias", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:CreateAccountAlias", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d2e2523-cd7d-4b4b-bc0f-659023b70c38", "record_id": "flaws_cloudtrail:0000136:0d2e2523-cd7d-4b4b-bc0f-659023b70c38", "row_index": 136, "timestamp": "2017-03-01T00:05:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d2e2523-cd7d-4b4b-bc0f-659023b70c38", "eventTime": "2017-03-01T00:05:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c967908-70bd-4576-a7e4-1a4e62ef86db", "record_id": "flaws_cloudtrail:0000137:c967908-70bd-4576-a7e4-1a4e62ef86db", "row_index": 137, "timestamp": "2017-03-01T00:05:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c967908-70bd-4576-a7e4-1a4e62ef86db", "eventTime": "2017-03-01T00:05:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJwbnAzanMvbzFITEtHZ2k5T2lCbHE4M3M2VHNwa2lzV1Z0TURDTzl6b1RNOGl4cmdLcVRVVVpCUm1RZ09TQ1oyYjQ3TkNpK2ErY2lueEpzdWQxLzZqQUxFUUtaamRCVkppWVlBMG9vKzNlZ1JsSFlvTFlMU2pmYi9LOWtCL0dudFpNTUpXeHh4cmRpc3NuK2VkUUkxN1E9PSIsImkiOiJTVG0va0lSR0Uxb1lRRjFwMUx4YjVBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03348bf4-611e-4881-9d6d-a0cdb0ce633c", "record_id": "flaws_cloudtrail:0000138:03348bf4-611e-4881-9d6d-a0cdb0ce633c", "row_index": 138, "timestamp": "2017-03-01T00:05:09Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03348bf4-611e-4881-9d6d-a0cdb0ce633c", "eventTime": "2017-03-01T00:05:09Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ6YTFTNVl6N1hSZzVYT3dFa1phQjBici9VRmowQlJyOGxvTHBKdVNEL2hJdjZXN3FWMHhOaHN4aTJuYUFyQjJHdDZjRUp6cTEzV1BJZmtjNTRlVk9jdUExMzR0aHlDVVNBQnV5cjBqVVh5eTJ1QVBHaDRTTVlxWG1yUHBSZDRTM2FwSFE3elJicUtvNW9wL3IwSXUrU2c9PSIsImkiOiJKamwvTG5tNkN3V1hYeUxOWGpqVVlRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e810333-f83b-4373-b271-bc3344bf92a1", "record_id": "flaws_cloudtrail:0000139:6e810333-f83b-4373-b271-bc3344bf92a1", "row_index": 139, "timestamp": "2017-03-01T00:05:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e810333-f83b-4373-b271-bc3344bf92a1", "eventTime": "2017-03-01T00:05:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIwNm5yM2hGM3RCUjZKcE5NRThPREhjQjF0T0d2cjZWWTJBS3NtQzI4dmlFalRGUFVoTVpEeUsrL1FlV29hZHEwV1o3d2NjZUtya2Fkd2V6QTNWRHZldDVxYzlIRkNya1RybXlkVVNnT2Q1RXJIVDlUZlNxV0VETnhBRUw5cE5PcHBEM0RzRE5DcEhva2NGOC9GYVhnNXc9PSIsImkiOiJiNktBdENTREJISHQ5ZmNsSittQUF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96fed16e-9bdb-4632-bb68-736ce45e921b", "record_id": "flaws_cloudtrail:0000140:96fed16e-9bdb-4632-bb68-736ce45e921b", "row_index": 140, "timestamp": "2017-03-01T00:05:14Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96fed16e-9bdb-4632-bb68-736ce45e921b", "eventTime": "2017-03-01T00:05:14Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJuNW9adkx2ZmI2ZVlISzJDRVRBWUxDQnZwOGZONDVIMHhFNU5Cclc0d3JPbGtqcmVmQWxSd0NncGlyT004RHI2amRtblY1aDYyNmpXaFZqSkliZ3BqNDJrVlhnejVETmhNcmthZkc2WmxISjEveW9ub3I1WkdocE12Wm43OEhZYzRVaTNYbWJ3bTBsS0FxK0RDVDdsRnc9PSIsImkiOiI2S1Avc1BVYTNldElLTGhhUit1WWNBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "548120c7-82c7-4e3c-b0fd-095f9239b315", "record_id": "flaws_cloudtrail:0000141:548120c7-82c7-4e3c-b0fd-095f9239b315", "row_index": 141, "timestamp": "2017-03-01T00:05:16Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "548120c7-82c7-4e3c-b0fd-095f9239b315", "eventTime": "2017-03-01T00:05:16Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJOcDN0OTdZeG5sV3BnZklOL0FiUkZ4ejFVYkV6YURqOTdQOHVJcDBVNjNkRG5LcHJzTVc4N25IZ1BWbHJ3dXExUjUyZlp4YUVzUnZ5aUJkYTF1bTdTUjkrcFdpcUNoQll0SU9JWktIMk1VSUsya1c2dk8vbkhkS3g0Mk9DaGJiTFRGOU1SQ1FGR2JCOUFZYy9aKzd5VGc9PSIsImkiOiJpM0VVUEhXM1J0OENhODhZMW13QmFRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b012c820-def7-4cd6-af73-d292ff06f1b5", "record_id": "flaws_cloudtrail:0000142:b012c820-def7-4cd6-af73-d292ff06f1b5", "row_index": 142, "timestamp": "2017-03-01T00:05:18Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b012c820-def7-4cd6-af73-d292ff06f1b5", "eventTime": "2017-03-01T00:05:18Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiI1SExFWnJ2M0VOb1lQdVBjMHk1V0x1YlRpN1NyTHFMSXZtTk4vUlRsV2FQdWZ3N2JHSitlY2kwc3NYa0wvS1V3K2J1ckJVZHN0czJPb0Z0YVJKdnM3amZhbjluVzVaS05jaGxGTjk3TzM2bU9FRThsNjU5VGRqRk84ZEpyVjZOZ2szd05TenVCOXJjN2N1SjhPbGtLaVE9PSIsImkiOiJTL1UvazhHa3JyOHlYSDBUMmx0V01BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "219d8ab6-5956-4762-bca0-9f40ef71478", "record_id": "flaws_cloudtrail:0000143:219d8ab6-5956-4762-bca0-9f40ef71478", "row_index": 143, "timestamp": "2017-03-01T00:05:19Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "219d8ab6-5956-4762-bca0-9f40ef71478", "eventTime": "2017-03-01T00:05:19Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJPL2pBc1RXM0FWNGZIeVYxSko0bWVCOTFwWElqTXM1NW5Ec2Rxc0FEdTNFMlRvRTZHdEgyMGJhNllDOUxxalVaY3NkRWo5RmlEWnRKUms3UERFMzR6MGI1c2RNSWNadzB3ZHNqa0NLbTNxUEVtaEtFN3pZc0c5STcxb1FHbDFwVEdsYThMeUlsRjVFYktabkNaS3ZLUWc9PSIsImkiOiJWcnh2Z0xDSHJhRjlJVUNGWXd4Y1pnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd77589c-beb2-44f8-ab3e-c9762fa4e8dd", "record_id": "flaws_cloudtrail:0000144:dd77589c-beb2-44f8-ab3e-c9762fa4e8dd", "row_index": 144, "timestamp": "2017-03-01T00:07:17Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd77589c-beb2-44f8-ab3e-c9762fa4e8dd", "eventTime": "2017-03-01T00:07:17Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-83d15d668fb2941db"}]}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "870c92d7-c229-429c-a9d2-4a659e9c6a5d", "record_id": "flaws_cloudtrail:0000145:870c92d7-c229-429c-a9d2-4a659e9c6a5d", "row_index": 145, "timestamp": "2017-03-01T00:08:53Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "870c92d7-c229-429c-a9d2-4a659e9c6a5d", "eventTime": "2017-03-01T00:08:53Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fa45ec9-5f52-41bf-9d81-8be9c302adf0", "record_id": "flaws_cloudtrail:0000146:3fa45ec9-5f52-41bf-9d81-8be9c302adf0", "row_index": 146, "timestamp": "2017-03-01T00:12:35Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.255.5.5", "user_agent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fa45ec9-5f52-41bf-9d81-8be9c302adf0", "eventTime": "2017-03-01T00:12:35Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.255.5.5", "userAgent": "aws-cli/1.11.56 Python/2.7.12 Darwin/16.4.0 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0d2e3d8-bdf3-4259-9b21-5d7e5a24a64d", "record_id": "flaws_cloudtrail:0000147:f0d2e3d8-bdf3-4259-9b21-5d7e5a24a64d", "row_index": 147, "timestamp": "2017-03-01T00:21:24Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "[aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0d2e3d8-bdf3-4259-9b21-5d7e5a24a64d", "eventTime": "2017-03-01T00:21:24Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "[aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6430f97-260e-40fb-9c3a-88c1b8df8851", "record_id": "flaws_cloudtrail:0000148:a6430f97-260e-40fb-9c3a-88c1b8df8851", "row_index": 148, "timestamp": "2017-03-01T00:25:13Z", "event_type": "GetCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 811, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6430f97-260e-40fb-9c3a-88c1b8df8851", "eventTime": "2017-03-01T00:25:13Z", "eventName": "GetCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetCredentialReport", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ba01f5a-c103-4e07-b66c-13c3ce207a41", "record_id": "flaws_cloudtrail:0000149:6ba01f5a-c103-4e07-b66c-13c3ce207a41", "row_index": 149, "timestamp": "2017-03-01T00:25:58Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "[aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ba01f5a-c103-4e07-b66c-13c3ce207a41", "eventTime": "2017-03-01T00:25:58Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "[aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71f10be8-13a2-4934-8342-4e1d6e62ec0c", "record_id": "flaws_cloudtrail:0000150:71f10be8-13a2-4934-8342-4e1d6e62ec0c", "row_index": 150, "timestamp": "2017-03-01T00:29:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71f10be8-13a2-4934-8342-4e1d6e62ec0c", "eventTime": "2017-03-01T00:29:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc1d9ecc-b1f9-4ca1-8c29-b3dd79a84048", "record_id": "flaws_cloudtrail:0000151:fc1d9ecc-b1f9-4ca1-8c29-b3dd79a84048", "row_index": 151, "timestamp": "2017-03-01T00:29:43Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1476, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc1d9ecc-b1f9-4ca1-8c29-b3dd79a84048", "eventTime": "2017-03-01T00:29:43Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA0AN7RSJT1120F5FG", "expiration": "Mar 1, 2017 6:38:38 AM", "sessionToken": "FQoDYXdzEGoaDDaUMFmgiF/WNIGwFCK3AxQ6YyDtoW7kJqZIOxMSz+N4680GmiZ3lUcBgyf39nyIcu9aOsbE4WAflsrHZ4hCyF6fnbfxkr9VSU+wUTPVUrScSzpIMiVApSGH/8fEfkjbYPU7j/aoMh2YkiljJhSITjChZqVefmllJyGB6KgC5CqGPh94TLJwNM7sdZ2359oii6oM/CXtscCEk63NOQmQWI8+fSZxDSsqnL5sFxBmxIz7P7qO9fbgpRK4mmR9A6AFHoPFDIy3l7r83hz7UfbXqCG9p5S72c5MXb/uMIDOsHhmrwQYSDvS8A12eKLZ/BUiCJdcdlrLjg2ImheD98Gc8zjVzkSmNnmqJ3HpsjaVy63hLoLcjXDwLxAcwiBpOCgL8DEEuyNMV4eQzwhMOmUo+CDGwqKsyVaBDDjLh8qfBBFj4Z2KVo0JIKasrbNtVDqQywC92+iLGYJwaJpRixy8GO5fwDExDd2jNDF8IEyY0eBLXh88yxA32Gz0gRIvMx8isDFsUdW17iW43SPGwtAvUCcmzoPtw37aGqgXMBqDtrAaozrhaY3yTvLjZJeOnS2Rf/gBdWSH7d4gAZslq4raU74V2DavXAwo96vYxQU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9f8eca4-b54d-4032-8b35-6cdf7d4bb202", "record_id": "flaws_cloudtrail:0000152:d9f8eca4-b54d-4032-8b35-6cdf7d4bb202", "row_index": 152, "timestamp": "2017-03-01T00:31:51Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9f8eca4-b54d-4032-8b35-6cdf7d4bb202", "eventTime": "2017-03-01T00:31:51Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42d7fe7a-4bcd-4e0b-ac19-2b97f3ccbff6", "record_id": "flaws_cloudtrail:0000153:42d7fe7a-4bcd-4e0b-ac19-2b97f3ccbff6", "row_index": 153, "timestamp": "2017-03-01T00:32:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42d7fe7a-4bcd-4e0b-ac19-2b97f3ccbff6", "eventTime": "2017-03-01T00:32:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc15ac2c-d997-4d8c-8e68-44310c0360a2", "record_id": "flaws_cloudtrail:0000154:bc15ac2c-d997-4d8c-8e68-44310c0360a2", "row_index": 154, "timestamp": "2017-03-01T00:37:03Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1321, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc15ac2c-d997-4d8c-8e68-44310c0360a2", "eventTime": "2017-03-01T00:37:03Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?Action=CopySnapshot&SourceSnapshotId=snap-83d15d668fb2941db&Version=2015-10-01&SourceRegion=us-west-2&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Expires=3600&X-Amz-Credential=AKIA1ZBTOEKWKVHP6GHZ%2F725825%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Date=725825T693133Z&X-Amz-Signature=a29462acd02e554bbf20389b7d3068dbf535c8024134dd1a7cee15701c95eb09"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f63e0172-fda2-4fce-86f4-bc5317c910335", "record_id": "flaws_cloudtrail:0000155:f63e0172-fda2-4fce-86f4-bc5317c910335", "row_index": 155, "timestamp": "2017-03-01T00:40:13Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f63e0172-fda2-4fce-86f4-bc5317c910335", "eventTime": "2017-03-01T00:40:13Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-28T17:35:07Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06b056664-dd39-4a6b-9757-585776d775599b", "record_id": "flaws_cloudtrail:0000156:06b056664-dd39-4a6b-9757-585776d775599b", "row_index": 156, "timestamp": "2017-03-01T00:40:14Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "Root", "arn": "arn:aws:iam::811596193553:root", "account_id": "811596193553", "principal_id": "811596193553", "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "255.253.125.115", "user_agent": "[S3Console/0.4]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06b056664-dd39-4a6b-9757-585776d775599b", "eventTime": "2017-03-01T00:40:14Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "255.253.125.115", "userAgent": "[S3Console/0.4]", "awsRegion": "us-west-2", "userIdentity": {"type": "Root", "principalId": "811596193553", "arn": "arn:aws:iam::811596193553:root", "accountId": "811596193553", "sessionContext": {"attributes": {"mfaAuthenticated": "true", "creationDate": "2017-02-28T17:35:07Z"}}}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6229e18-7f6c-48aa-85b2-a4e02e603cdb", "record_id": "flaws_cloudtrail:0000157:a6229e18-7f6c-48aa-85b2-a4e02e603cdb", "row_index": 157, "timestamp": "2017-03-01T00:40:54Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1382, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6229e18-7f6c-48aa-85b2-a4e02e603cdb", "eventTime": "2017-03-01T00:40:54Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "backup snapshot", "destinationRegion": "us-west-2", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&Version=2015-10-01&Description=backup%20snapshot&Action=CopySnapshot&DestinationRegion=us-west-2&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Expires=3600&X-Amz-Credential=AKIA1ZBTOEKWKVHP6GHZ%2F725825%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Date=725825T89510Z&X-Amz-Signature=88c401b809f3345a1ccc5776e8138be5a32b2798e8f86c50756a5667ce5e703c"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7834ecbc-00b3-400c-aaa2-b0b3e370355ff", "record_id": "flaws_cloudtrail:0000158:7834ecbc-00b3-400c-aaa2-b0b3e370355ff", "row_index": 158, "timestamp": "2017-03-01T00:41:02Z", "event_type": "CopySnapshot", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 1383, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7834ecbc-00b3-400c-aaa2-b0b3e370355ff", "eventTime": "2017-03-01T00:41:02Z", "eventName": "CopySnapshot", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-west-1", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"sourceRegion": "us-west-2", "sourceSnapshotId": "snap-83d15d668fb2941db", "description": "backup snapshot", "destinationRegion": "us-west-1", "presignedUrl": "https://ec2.us-west-2.amazonaws.com/?SourceRegion=us-west-2&SourceSnapshotId=snap-83d15d668fb2941db&Version=2015-10-01&Description=backup%20snapshot&Action=CopySnapshot&DestinationRegion=us-west-1&X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Expires=3600&X-Amz-Credential=AKIA1ZBTOEKWKVHP6GHZ%2F725825%2Fus-west-2%2Fec2%2Faws4_request&X-Amz-SignedHeaders=host&X-Amz-Date=725825T65217Z&X-Amz-Signature=77db1c17b712b9f76ec6ade44a763a24009ae3809dfe396a826934adf4c8dd53"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d737c720-a8d8-453b-bc64-3f9c016173c49", "record_id": "flaws_cloudtrail:0000159:d737c720-a8d8-453b-bc64-3f9c016173c49", "row_index": 159, "timestamp": "2017-03-01T00:43:02Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 830, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d737c720-a8d8-453b-bc64-3f9c016173c49", "eventTime": "2017-03-01T00:43:02Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1d6ac3d-72e2-49f6-854d-007dc69e2f06", "record_id": "flaws_cloudtrail:0000160:b1d6ac3d-72e2-49f6-854d-007dc69e2f06", "row_index": 160, "timestamp": "2017-03-01T00:47:01Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "[aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1d6ac3d-72e2-49f6-854d-007dc69e2f06", "eventTime": "2017-03-01T00:47:01Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "[aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3dffd8b-201f-4fce-bd8e-fc6265af8640", "record_id": "flaws_cloudtrail:0000161:e3dffd8b-201f-4fce-bd8e-fc6265af8640", "row_index": 161, "timestamp": "2017-03-01T00:47:30Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 828, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3dffd8b-201f-4fce-bd8e-fc6265af8640", "eventTime": "2017-03-01T00:47:30Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00bb3fef-f892-43d6-b9e5-cb064e478a0d", "record_id": "flaws_cloudtrail:0000162:00bb3fef-f892-43d6-b9e5-cb064e478a0d", "row_index": 162, "timestamp": "2017-03-01T00:47:59Z", "event_type": "CreateVolume", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.237.239.55", "user_agent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 827, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00bb3fef-f892-43d6-b9e5-cb064e478a0d", "eventTime": "2017-03-01T00:47:59Z", "eventName": "CreateVolume", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.237.239.55", "userAgent": "aws-cli/1.10.25 Python/2.7.10 Darwin/15.6.0 botocore/1.4.16", "awsRegion": "us-west-2", "errorCode": "Client.UnauthorizedOperation", "errorMessage": "You are not authorized to perform this operation.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "zone": "us-west-2a"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fd5eee8-f60a-4c83-a559-bb5bc50f3f6d", "record_id": "flaws_cloudtrail:0000163:3fd5eee8-f60a-4c83-a559-bb5bc50f3f6d", "row_index": 163, "timestamp": "2017-03-01T00:54:20Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fd5eee8-f60a-4c83-a559-bb5bc50f3f6d", "eventTime": "2017-03-01T00:54:20Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa4eb0dc-407c-4dfb-98b4-83b8a201fa60", "record_id": "flaws_cloudtrail:0000164:aa4eb0dc-407c-4dfb-98b4-83b8a201fa60", "row_index": 164, "timestamp": "2017-03-01T00:55:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa4eb0dc-407c-4dfb-98b4-83b8a201fa60", "eventTime": "2017-03-01T00:55:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87f84be6-b930-41f2-bfef-22ca4ea15679", "record_id": "flaws_cloudtrail:0000165:87f84be6-b930-41f2-bfef-22ca4ea15679", "row_index": 165, "timestamp": "2017-03-01T00:55:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87f84be6-b930-41f2-bfef-22ca4ea15679", "eventTime": "2017-03-01T00:55:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65fcf192-b73e-4419-8fa8-34c71f2dbed4", "record_id": "flaws_cloudtrail:0000166:65fcf192-b73e-4419-8fa8-34c71f2dbed4", "row_index": 166, "timestamp": "2017-03-01T00:55:22Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65fcf192-b73e-4419-8fa8-34c71f2dbed4", "eventTime": "2017-03-01T00:55:22Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJoWFhIUWYvb1J4SXRmbTZNODhGbWhmTVkyd1RBcEwxNVJBUHluM2p2TzhlMWROalhsM1ZyUGVvOXNielpGSDJCUzRlREN0V0U2YzdqSnVjVysxZmgyVGt1anQ4ZGU5SzVYcUViMmx2MTZ4WnNtM1A4MG42M1hrK1hJdVhCN1ZqREE3L21naW5CTVFmUEczdTNMT3JWZXc9PSIsImkiOiIvdkhRUFg3ODZ5QlJiNE9VSDF6VEpnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f5cdc71-9eed-47d1-8bed-02a346a2b899", "record_id": "flaws_cloudtrail:0000167:0f5cdc71-9eed-47d1-8bed-02a346a2b899", "row_index": 167, "timestamp": "2017-03-01T00:55:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1059, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f5cdc71-9eed-47d1-8bed-02a346a2b899", "eventTime": "2017-03-01T00:55:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiI0RkVHelN4dnF2c2NObUJRdUZKNWhSd2RiWms0dC9HaDRya1JGdCtVUnJKYnhtcmFFR2tvU0tQcmhrbmZtdjJveVdIYlNmdTVtblFObzVKci9LNkVVQmYyZFBZazllYjdqbUxENTc3U1RzcmR4dXNzWmI0VUJPM0VNMi9FWXJqeG5XU3FrOVZNYjdaQWZxelQzQWhOcUE9PSIsImkiOiJCWEhybzQreHAreEt6cjllS1N1VG9BPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2cca9d1-332a-41c0-99a7-5f522fc5e520", "record_id": "flaws_cloudtrail:0000168:f2cca9d1-332a-41c0-99a7-5f522fc5e520", "row_index": 168, "timestamp": "2017-03-01T00:55:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1062, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2cca9d1-332a-41c0-99a7-5f522fc5e520", "eventTime": "2017-03-01T00:55:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJOYmo2VzR0a1dPS01KMm8rT1dCNTRpQit6NFMrb0s4djcwNnFTWkNGazhDMW1lMVE4R3gvcU9hOGZia0hpL3orL05WMTNkQWllUllzRzJWSGIxT293ZkpvNkZKc1JGYU9zbzFPUThWeDN3aGhlTkViUHFyS1NKK09hcWRmdTBzZEFRMWl3d0JoY1lDTng4UFJiam9jYUE9PSIsImkiOiIxZE5YUDZYYTRpaGREVGthYjFvU2Z3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "086cc865-755f-47e2-9849-341a0cf4d6a8", "record_id": "flaws_cloudtrail:0000169:086cc865-755f-47e2-9849-341a0cf4d6a8", "row_index": 169, "timestamp": "2017-03-01T00:55:28Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "086cc865-755f-47e2-9849-341a0cf4d6a8", "eventTime": "2017-03-01T00:55:28Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJQa01aQ0x2M01La09zUkxIeE00ZFFSclp5Sjh3MEtLYXdoRjQxQUhxb1o0T3RvWk9qcFZYUjJvaTNROFM3SFcwVEpGSktsNGRWRlQ1Y1djTmpIa2xMTkRYRHA2M0poSmhDVnFGNXBTakYvTEZJVmdsamtJSlBPZ3dTZENQQ3JNdEVBR0Q0T0NNVjRCTDE1YUhST01ubkE9PSIsImkiOiJycUFMTkhVZFNQWFgvVUlMYXJpUzBnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39025b7-7642-49dd-b5ee-709fc9670d54", "record_id": "flaws_cloudtrail:0000170:39025b7-7642-49dd-b5ee-709fc9670d54", "row_index": 170, "timestamp": "2017-03-01T00:55:30Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39025b7-7642-49dd-b5ee-709fc9670d54", "eventTime": "2017-03-01T00:55:30Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ1akpHWWZuQk51SXl5clhBUVp1K3ZRYVVwOWM2MDdzM1YxZHpLZ1B2azV5OE5YaENCOVRmbTZZMTgvMTdSY0Z0WkE5aHR5ellyWUFUb3FoUURxTWdKN0tobGdxVEVMempQbTFJLzE1SHNBeDU3bks3Y2doRUsydmk4alg2QXptNllXQnhRUmRsVWdTZ2dXWTA1aU82V1E9PSIsImkiOiJyQzNlYkkydWp1UGxQQmZ4NUI5eWNnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcf0a5c6-0f3d-4d1e-87be-01b63df74349", "record_id": "flaws_cloudtrail:0000171:fcf0a5c6-0f3d-4d1e-87be-01b63df74349", "row_index": 171, "timestamp": "2017-03-01T00:55:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1061, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcf0a5c6-0f3d-4d1e-87be-01b63df74349", "eventTime": "2017-03-01T00:55:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJZenQzYW43YllEQnM1QnVsY1NUQ3YzdUQ0eUJyaUFZaVhNYUoyS0lhMGtPeUFqa0M3dDdPNUo4RVJDemdPQXdwV1lVVVZ6ek1GT3U2TDhoZ2RDakhuWHpvMk5paWp6ckdqaUgwbWZBekJWUE8rN0N1eWtmTDY1MkJPVFIzMXgzeTFKclFYdGZWODBTUWVPTlE1T3NpSVE9PSIsImkiOiIvcUdINU1pejFCY0d3UkV1ZUJZQ1h3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e87b307e-fad8-402f-ad5f-57dfd1a31752", "record_id": "flaws_cloudtrail:0000172:e87b307e-fad8-402f-ad5f-57dfd1a31752", "row_index": 172, "timestamp": "2017-03-01T00:55:36Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "5.251.1.100", "user_agent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1060, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e87b307e-fad8-402f-ad5f-57dfd1a31752", "eventTime": "2017-03-01T00:55:36Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "5.251.1.100", "userAgent": "aws-cli/1.11.56 Python/3.5.2 Linux/4.10.0-eudyptula-325a7-g28da37e botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIzUU4wSVVlNEFsZ1pRM2tpRzNvRjFkdDM1MGlMaXQ3aWpYVTU0b0NNRzU4cHFLWFE5ZXlQSG9jLzdwaVZxaVFiY0todFNDM3F5bjY2R2tJeFFZM3FEL2xzN3U1Z3VuMUgwQ3A2a0JHbUlOeG9aUS9BTExsVEg0Rmd0bzAvSnFwUW8yZWNrbnJXbVdiTmRpVHljTXNrTUE9PSIsImkiOiJqSnFmZVNBTHlPWmF3a0R5YzRMYUJBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b91efc3f-4501-4371-8f87-3b8252c99740", "record_id": "flaws_cloudtrail:0000173:b91efc3f-4501-4371-8f87-3b8252c99740", "row_index": 173, "timestamp": "2017-03-01T00:56:05Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b91efc3f-4501-4371-8f87-3b8252c99740", "eventTime": "2017-03-01T00:56:05Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6de32f7-8385-4ef2-bb0c-5409b2bdb2e6", "record_id": "flaws_cloudtrail:0000174:b6de32f7-8385-4ef2-bb0c-5409b2bdb2e6", "row_index": 174, "timestamp": "2017-03-01T00:57:51Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6de32f7-8385-4ef2-bb0c-5409b2bdb2e6", "eventTime": "2017-03-01T00:57:51Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e17026-df94-4100-9f36-cd22ec09fe7e", "record_id": "flaws_cloudtrail:0000175:e17026-df94-4100-9f36-cd22ec09fe7e", "row_index": 175, "timestamp": "2017-03-01T01:04:25Z", "event_type": "GetInstanceProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e17026-df94-4100-9f36-cd22ec09fe7e", "eventTime": "2017-03-01T01:04:25Z", "eventName": "GetInstanceProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetInstanceProfile on resource: instance profile flaws", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cbf2fe7c-1ca3-4643-b3d3-eb932186e061", "record_id": "flaws_cloudtrail:0000176:cbf2fe7c-1ca3-4643-b3d3-eb932186e061", "row_index": 176, "timestamp": "2017-03-01T01:06:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cbf2fe7c-1ca3-4643-b3d3-eb932186e061", "eventTime": "2017-03-01T01:06:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119a8fc1-b175-4b99-9a3e-c171faad14a1", "record_id": "flaws_cloudtrail:0000177:119a8fc1-b175-4b99-9a3e-c171faad14a1", "row_index": 177, "timestamp": "2017-03-01T01:06:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119a8fc1-b175-4b99-9a3e-c171faad14a1", "eventTime": "2017-03-01T01:06:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJuZGd2c29VanllcTVNd3EyNEJHVHZFd3pid1BIVExEOGVDdCs3WVZMZmlhRGJMVTkzdmRRampJRTJFS2RubU5zMm5oZlpqcVlJcEQ3UDZBVTNhekhyczRaZHVLOXFDZ3BRZkNGRWYvR040MXBtNVUxQm45RUhQUjlYaGhLSzJtK2gyZ2xNV1J0R3dSb2dTRDFubFR3aFE9PSIsImkiOiJrRFJjenRSRFpnZkNKZVd0OGpQNzRnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c48936c4-c303-4018-a1e8-e0f7404d7f56", "record_id": "flaws_cloudtrail:0000178:c48936c4-c303-4018-a1e8-e0f7404d7f56", "row_index": 178, "timestamp": "2017-03-01T01:06:51Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c48936c4-c303-4018-a1e8-e0f7404d7f56", "eventTime": "2017-03-01T01:06:51Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIyMENaL1ltYXlnYzk5NCtyWjBpRmF1eVJFdnhWdFZUZHNxdXhoSWdGNHZnMWlwWmwrQnd0VEVqOXdha3RCZnIzQzZ4R0hqVjV2MjQrZGcvbW5JemxLcVJVNWgraE9ySHg2SnV5YjYwZ053RkpBa29PRjgxZjJZZHR0M042bDdYaVhxRUJ5NTFNM1dMbFpBS1JLNzh0VUE9PSIsImkiOiJ6VEdFTjZkdUNYS0d2YWloVzA5bDF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1f5d0c6-bd31-445f-8893-4668b05af9f2", "record_id": "flaws_cloudtrail:0000179:e1f5d0c6-bd31-445f-8893-4668b05af9f2", "row_index": 179, "timestamp": "2017-03-01T01:06:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1f5d0c6-bd31-445f-8893-4668b05af9f2", "eventTime": "2017-03-01T01:06:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJta3p5N2lPQXEwUTBETjkrUDdVQVFEalhqYUM0UDEwWnhDamFqeWtsdGJGdnZaT1V3a3cwVEREazh3ZDVDeDE4K1FSSFhGeUhJSFVXUSsxUDZpRENxQjZJL3pqVVBQbFpOR2hNYmcremYyd0RkcktSbm9iTlNhait2OTZWanZnWUUxaklIVjgrV2JhRWhTRU9GNFBiN2c9PSIsImkiOiJWejVaNFZWRnc5RmU3YkVteTI1Z2xBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de22b770-e92d-4ae6-bccb-965afcf57c80", "record_id": "flaws_cloudtrail:0000180:de22b770-e92d-4ae6-bccb-965afcf57c80", "row_index": 180, "timestamp": "2017-03-01T01:06:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de22b770-e92d-4ae6-bccb-965afcf57c80", "eventTime": "2017-03-01T01:06:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiI3ZW5mY1hHY0xWRWFDb2tEYzk4emNBQjhmOXVSN0lyTmQvR1FpVVhNSjg5MnNxZGRjREhOcHVkVEt5aVZQeiszNy9TUUxsRzVqUldaem5IMlNVTEw1WXhuRmxzTldOcTdTTUdJZVJXTzlZYmJEMTIzd0QvMUY1U1lqZlJkWXRiWmJLeHNrMEFCYnpCS3ptV3pKbU5GbVE9PSIsImkiOiJTSUVVMVZrdDZUOFlzMWVYSjVrbWhRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "799957f3a-644e-4755-b355-57ae5a5e6399", "record_id": "flaws_cloudtrail:0000181:799957f3a-644e-4755-b355-57ae5a5e6399", "row_index": 181, "timestamp": "2017-03-01T01:06:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "799957f3a-644e-4755-b355-57ae5a5e6399", "eventTime": "2017-03-01T01:06:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJPYVI0NmFYbmJxNGhMckhDR1lzWmFwTE5rbkFsbGprSnhCTzUvbEJGaXUwWkFuWmxYdXdGR2FkY3Zlak1uaXJXMjh0RTh6Um9PZzRtUnJzQzdyUXdZSXRRV2orY0JtRWFwSmtRY0Z4Q0RoajlZZld6NmJzYmw0QTNxS05ScVg1K1k5OVA3UEJFTWNIWXAxQUk0dms0Rmc9PSIsImkiOiJXdmRBcjlLSzhsb2k3RURERkZWcHVnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0804c75-e849-4c0f-a79a-86b2a2002d40", "record_id": "flaws_cloudtrail:0000182:d0804c75-e849-4c0f-a79a-86b2a2002d40", "row_index": 182, "timestamp": "2017-03-01T01:07:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0804c75-e849-4c0f-a79a-86b2a2002d40", "eventTime": "2017-03-01T01:07:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIxR2p4d0w4N1VxMUZIekhDcldSNFhvLzgrbkN5TzV4Uk5SRjNFR0g2OVhVSU9KL3V6bTRTZ1lQcE13VUs5dWJFZG9ZYWNEOVdXT2dyS2pybklBYitjQ3NnMnFvMzlnNzFaODAvUG1FdktKZi9FdGxBNWJXMkhJeTkyaGtQMkxBRzVOZ2ZqY3A5aElUV0YvQWNMQjhkeVE9PSIsImkiOiJGaEVpeWQ5WU1tQ1ZxVDNoNWNkdm9nPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdae5549-a612-49d3-90b9-92bbf95de584", "record_id": "flaws_cloudtrail:0000183:cdae5549-a612-49d3-90b9-92bbf95de584", "row_index": 183, "timestamp": "2017-03-01T01:07:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdae5549-a612-49d3-90b9-92bbf95de584", "eventTime": "2017-03-01T01:07:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJEeUxHMWk0aXNtNjRzemRMV1N1Y2xLRGFJZ3BMWEVRRTBCNUJSb1lVa1lqZXdBeGI1dVpKYWJHSmFQdStGNXRuSGlPZ2NDd3NiSE9rNmFVaDQxRHh2T0NCN1JCS2E5NVhOZXJCdU5vQWM0K1RqSG5mY1M4bm9oM3ZDY1QrNFJkT1BvMWk4Ykp4aHU0TFRiTTZkT0Z6SVE9PSIsImkiOiI2TkZmeWppUU9sN0NwSkJWT0VuWTNnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1c8c66d-64d9-4b89-9eb4-01fbc8eb0c3c", "record_id": "flaws_cloudtrail:0000184:e1c8c66d-64d9-4b89-9eb4-01fbc8eb0c3c", "row_index": 184, "timestamp": "2017-03-01T01:07:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1c8c66d-64d9-4b89-9eb4-01fbc8eb0c3c", "eventTime": "2017-03-01T01:07:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a4dff2f-b4e4-4fa2-a234-f8dca5ec2aad", "record_id": "flaws_cloudtrail:0000185:5a4dff2f-b4e4-4fa2-a234-f8dca5ec2aad", "row_index": 185, "timestamp": "2017-03-01T01:07:41Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a4dff2f-b4e4-4fa2-a234-f8dca5ec2aad", "eventTime": "2017-03-01T01:07:41Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJLRWhCeDNSZTVvQmNFS0ZhMzNEampDaHM3WjVLVkROQWtmaW1RKytWL1dNQm9uT0JNQ3Y5SVFNa0tDOG0xQUh1K1lqL1R6Ukd4YklMc0hTeGsvd0hLM3pUWjJ1Z3ZwSVpXYW5XQ2o5SldIS3plVnY4R0gwdkplVWpXUzYxQ1huV3ppd0JaYnI3Wm5YM0xhYmRtbkRZVEE9PSIsImkiOiJhM3hvZmhvYmJaOURRcE1xNW5qVGRRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "548083f-985a-4451-ab34-56accf4f80fa", "record_id": "flaws_cloudtrail:0000186:548083f-985a-4451-ab34-56accf4f80fa", "row_index": 186, "timestamp": "2017-03-01T01:07:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "548083f-985a-4451-ab34-56accf4f80fa", "eventTime": "2017-03-01T01:07:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIrK3NPZXZqZ1hQOEVqNnk3RTRiUnkyWHRZSXU5akFaQ1RZRERIamdHdURzNG9pU2xSQzJ4eXR6Z0YwY0tzSmVEVEpxMTgycnFNejFiWGZEd2NlNFI2S1kvWFRwL2F0V2d2dGhCSDF0UkZxUHlJblQwQkZGYUpaVkVIamE2Y1J1R1o3ZHFyRFlDVll4K09aLzFxNEE1MWc9PSIsImkiOiIzaVc5eDdRY2RxbjZpM3BLYnUybFVBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43c71ad7-a526-4f66-a640-9bd7e97d53ea", "record_id": "flaws_cloudtrail:0000187:43c71ad7-a526-4f66-a640-9bd7e97d53ea", "row_index": 187, "timestamp": "2017-03-01T01:07:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43c71ad7-a526-4f66-a640-9bd7e97d53ea", "eventTime": "2017-03-01T01:07:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJmMVYydGFkZkI3dERzb1pzTm5hMkUxaHpHRGRuUHI1SFhNVEV0VE9MbnBOaVgyZ1dBYW5SRDdlNGhjdWtoTnJEUVhGc2RBMnhYYXQvT2NNQnpON1E4WVkrZnNYaUtPcnNzMGRmOU5aZVpoRWtGWTJuNkZUUktvR1VvYlJkU2ZkZnNsaWtMSEhRN0JQYzJCd24vVGh0cXc9PSIsImkiOiI4QW80Q3NBdkN5ODBLTUZWQjAxZG5RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd7b99f7-c7e9-4d97-a4ec-3bbcecfbc873", "record_id": "flaws_cloudtrail:0000188:bd7b99f7-c7e9-4d97-a4ec-3bbcecfbc873", "row_index": 188, "timestamp": "2017-03-01T01:07:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1038, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd7b99f7-c7e9-4d97-a4ec-3bbcecfbc873", "eventTime": "2017-03-01T01:07:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJjNG5jMEc3cjZXYVB4ajgzZUtOZTdWUXRrMDIxLzFjYnkySDBqaGZtVm9jdmdWUzAzSkRwQkxHdnBjNGtxZzRYbENwVGlxWEU1RVBzSWlPN1dMU2RuUk52WFBDQ1NqNUpoS3R5WlU1MUdXRDZSUnNJQWNEK2M1YkNubFRkOUNBOU9vb2FOdzNrL3lJNHhpNGNSVFVRWkE9PSIsImkiOiJMaGdNZUEyQWt6bHBySzQzMkxRQXdRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9da813c-2ac6-4cf8-b6d8-0ebc0d902d3e", "record_id": "flaws_cloudtrail:0000189:e9da813c-2ac6-4cf8-b6d8-0ebc0d902d3e", "row_index": 189, "timestamp": "2017-03-01T01:07:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9da813c-2ac6-4cf8-b6d8-0ebc0d902d3e", "eventTime": "2017-03-01T01:07:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ6clZzUFpQcEVqME8rSkZGam54U0Z0RWc2SEJBVjhmenJhYjZwUmhSS1lPdWlmMWlubmZJaVljdk1iYWYvS2ExdnozYTlnN00rRmFtbDByWDVBNkpDUFpVMmpTakpqR29ZUnJKK0xFbGxIS1BaL0xOMHl1eUtiQllaNEFOS2t0aFhBc3BhS0VzS1ZqRkdUT1RrWnJIRGc9PSIsImkiOiJzQWt6K3BydGt2WUwxRXVHM1c1ZGhBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d1df538-c2b8-4e80-a9d7-199f58146a3a", "record_id": "flaws_cloudtrail:0000190:0d1df538-c2b8-4e80-a9d7-199f58146a3a", "row_index": 190, "timestamp": "2017-03-01T01:07:44Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d1df538-c2b8-4e80-a9d7-199f58146a3a", "eventTime": "2017-03-01T01:07:44Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJKZU8rUnh6dE1jM0Q2Qk5pbTdsOFVnNGdMKzRqMzVUSFRRcU4xemoyYVhvMDFkRmE5bFkzaTczeUltaTVMTjR5SXh3ckpacVp6NXZHaHBHTzVBc2h3aHo4ak8vVmF0MWNNaHc4UzZSRnMwZ1JmYXdYdlV0eHlSVW5GeGpWQkUrVTR6WExidjBiMzZvdGtpNlVwR2pXVVE9PSIsImkiOiIyZnYxRnFoZTlmN1JqeFlTT3E3UGl3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5465c386-0589-4412-9621-ec7b01a9cf8c", "record_id": "flaws_cloudtrail:0000191:5465c386-0589-4412-9621-ec7b01a9cf8c", "row_index": 191, "timestamp": "2017-03-01T01:07:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "207.217.4.43", "user_agent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5465c386-0589-4412-9621-ec7b01a9cf8c", "eventTime": "2017-03-01T01:07:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "207.217.4.43", "userAgent": "aws-cli/1.11.2 Python/2.7.12 Darwin/14.4.0 botocore/1.4.60", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJWTFBCK0VrSjZJOFhxdGZUdWVBaWVhNkhET01aLzdwNmkzUkJvVkVyUlRhS1ZKOWdackVYcnBFY1hBN2wzQ1lpcXh0cys1SXlSR1FmRVFDWWZWLzZwQUN5NjRPbHUwc2hxVElsSFBBNitsT25IaTlmN29FV0d1SlJscUVxMzNrZGRnVTNmeDFLVDZwbnZtYzBpbHVyRlE9PSIsImkiOiJNVEFjWDBPeTVMb0ZFajA1RzdZb1p3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99e01c32-3730-48a9-98f2-b81ee933280e1", "record_id": "flaws_cloudtrail:0000192:99e01c32-3730-48a9-98f2-b81ee933280e1", "row_index": 192, "timestamp": "2017-03-01T01:12:53Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIA6OOKWT2M5HCTX5D0", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "97.168.162.210", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1033, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99e01c32-3730-48a9-98f2-b81ee933280e1", "eventTime": "2017-03-01T01:12:53Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "97.168.162.210", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIA6OOKWT2M5HCTX5D0", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-02-28T19:48:50Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2017/03/01/[$LATEST]24fea9d3a296bd9090ebd1a99a50ea96", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "411996a9-da81-44e8-a209-c5e5b2d9f114", "record_id": "flaws_cloudtrail:0000193:411996a9-da81-44e8-a209-c5e5b2d9f114", "row_index": 193, "timestamp": "2017-03-01T01:29:01Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "411996a9-da81-44e8-a209-c5e5b2d9f114", "eventTime": "2017-03-01T01:29:01Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: iam:GetUser on resource: arn:aws:iam::811596193553:user/backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e884261-7ea0-4380-96f1-b2ea748e2f57", "record_id": "flaws_cloudtrail:0000194:e884261-7ea0-4380-96f1-b2ea748e2f57", "row_index": 194, "timestamp": "2017-03-01T01:29:44Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1475, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e884261-7ea0-4380-96f1-b2ea748e2f57", "eventTime": "2017-03-01T01:29:44Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAOFB4RRFGO7AOD2IK", "expiration": "Mar 1, 2017 7:45:57 AM", "sessionToken": "FQoDYXdzEGsaDP6fNInhvsOnwXIjECK3A71MSNkVwrPoXYcRmron042PVcHvfSbH8rZ90zt/epBVC6nge/UsGaH1oyys6HH94L9Gakk57yuLhzc2o8hzuBBUP8t4uX/qOyE5RGpkoFceUGkwmVogI57m02CaBw1lXTgYFi5miy5bN4dU/PStSBylIfFIZKJZvULQpogZtfR/F4AkVkd+rqxS/XQRylUW3w5BrywkDT0tEHUwcWclTgy1fruQDVJHC0YbcHXWvbVMHsZ1mS1Bo/wci2zsB3b5xlNyeD/wntwsspQp7q9ea/vwOpUfcmTSpXKBCy2eJ0uKXokZlvuw1yHN/bAqsvE8GMLCbQxDWHnbHo6q2zYFzPVU7dJOyO3NPyMh2mhkDUxX22OpiUaQF9lnvCt54DGx6cWlqLioomu0oikCJwZJyVWEfQwQONboGgs2st36LENvhxXuT8LGRbRqH1GTmFMXoGg/fOxsFxJGcSVVvbmD9SCGNnqo7RxDFWrP14dlNsnbVazbB1sUDoVYd/x99/Kwr1muzVmGYLvvWCLbHEUnAyxu4Ibf/NjgEMOxsC+79WgGouhedEs5syrcX7luwk/tX+kIblJcheEoiMjYxQU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3af922446-7b28-4f58-98cb-d78de17b9d79", "record_id": "flaws_cloudtrail:0000195:3af922446-7b28-4f58-98cb-d78de17b9d79", "row_index": 195, "timestamp": "2017-03-01T01:31:11Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3af922446-7b28-4f58-98cb-d78de17b9d79", "eventTime": "2017-03-01T01:31:11Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03d14f50-5f78-4701-a30c-7d19735450b8", "record_id": "flaws_cloudtrail:0000196:03d14f50-5f78-4701-a30c-7d19735450b8", "row_index": 196, "timestamp": "2017-03-01T01:37:32Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03d14f50-5f78-4701-a30c-7d19735450b8", "eventTime": "2017-03-01T01:37:32Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ed7c25b-c562-45bf-bffd-aa1432fc8a39", "record_id": "flaws_cloudtrail:0000197:5ed7c25b-c562-45bf-bffd-aa1432fc8a39", "row_index": 197, "timestamp": "2017-03-01T01:37:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ed7c25b-c562-45bf-bffd-aa1432fc8a39", "eventTime": "2017-03-01T01:37:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJGMW9xYnNPNkNYYTFEYTNqRllmblFoSS8vcGRSVnk4eDdMdmFzYXp6bzNiSFRxZEZETTB0Tmx0cnIzcERsTzRlVThOcW8yUURSRlFrbG83TDYxQklPbXZtYXdiTno5MzFLMGp6bnJ3NmF4dVdBZFB0NmFKWGdzZmYrZnF5cVVHSyt2K2pIb21sOHFtcHk2NkVKUzdQeFE9PSIsImkiOiJuMjdiQ1Zvams4aGxBSk9oaGh3WWx3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "221c5155-db6d-4585-90fd-039bab78f2d5", "record_id": "flaws_cloudtrail:0000198:221c5155-db6d-4585-90fd-039bab78f2d5", "row_index": 198, "timestamp": "2017-03-01T01:37:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "221c5155-db6d-4585-90fd-039bab78f2d5", "eventTime": "2017-03-01T01:37:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiI0ektUWnRxSlUyb1hLbFk1UnI0UDFWMG5WWEl3UTB6ZGUrZ05wMFAxRFQzK0hMTFJWNzFSMUVUMWZ0eHhjeDBFbHJ5dVRzYXBaMHVFZ2RZTjF4S0p4T2NKMUdHcUJhb25tcHA0QnQ0YmFjSGVCRW5LalR2RFA5UHpEQ3hJYWhscG8rYVFqTjRSR1A2VWJjd2pFM2VSM0E9PSIsImkiOiJVdDNRVHI5SkRlckR3bEFjcExjM2xnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7de6c95e-b31c-4b78-9909-dbdf9a4b32da", "record_id": "flaws_cloudtrail:0000199:7de6c95e-b31c-4b78-9909-dbdf9a4b32da", "row_index": 199, "timestamp": "2017-03-01T01:37:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7de6c95e-b31c-4b78-9909-dbdf9a4b32da", "eventTime": "2017-03-01T01:37:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJUV2JyNldkck5yVW9yM2kwZkhORXNmdy9LanlLSlBSNGVMSzNmZm9XT0JGdXUybGM4T0l3MGhZUE9PL2hRYTN5NDg0VFp1dGRaN1JnUEMzcGJrN2xnNmJpMWRXc3BFS0EwNzk4M1hlUkZleTJEMlJvcG96WmFTcEhZY0E5anJJV1NzekU0UUU4bjZ3QWtQUCtVZjczUmc9PSIsImkiOiJNSURacUhRKzdIaEgwZXdnbnl6Uk9RPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e721be8b-300b-4554-af3f-bb416d4425c9", "record_id": "flaws_cloudtrail:0000200:e721be8b-300b-4554-af3f-bb416d4425c9", "row_index": 200, "timestamp": "2017-03-01T01:37:45Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e721be8b-300b-4554-af3f-bb416d4425c9", "eventTime": "2017-03-01T01:37:45Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiI4TWFza0FSNWFXYkUwRmU3bWZzZVJzS3BrVnFSUS9JS0M0M1B1U1VrVTlzN2Zla2wrQ3hiZTBsUllEWllKTnlCdjdFUDZjVkZGU3N2aXJsT3owUjhRNStzd1RMRFFoR082cko4bG04TnRIa3JOMlJTQnZsdy83dFIvK29mMER4dE5sQTVHZjhzS2VFNUhvMWdtS3c5dVE9PSIsImkiOiIzcGJ0OWdzeFd6MEZEMmNmb0JVSjJnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19c902119-9c8b-44af-b002-20970a674", "record_id": "flaws_cloudtrail:0000201:19c902119-9c8b-44af-b002-20970a674", "row_index": 201, "timestamp": "2017-03-01T01:37:47Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1037, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19c902119-9c8b-44af-b002-20970a674", "eventTime": "2017-03-01T01:37:47Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJDZnRSNU1CVTZRTzY3cVQydmh3emhYQUUxakI1UUoyNlFrOS9DZnlsQXBlZFJFWWF5RUF0d3JPeXNFd0xqMVVDWnJwMlUwV0MxejE3ZXdSalVTZEtRaU1tTEY4ckI3dDlQVEtpUkgwbnNQRmkvQzNSYmE3dUZlaGhLaXRGM1A5MC9YM2syYTJid1Jvd0RaTjI1OWlWc2c9PSIsImkiOiJoZUN1M3Bjck9kZGEwcmpjQWFMQlpnPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad7c95bb-82df-40f9-9a8b-7a91f399b27f", "record_id": "flaws_cloudtrail:0000202:ad7c95bb-82df-40f9-9a8b-7a91f399b27f", "row_index": 202, "timestamp": "2017-03-01T01:37:50Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1039, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad7c95bb-82df-40f9-9a8b-7a91f399b27f", "eventTime": "2017-03-01T01:37:50Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJjMHUydWdjb0w1YXBWOC81WWJYTmhKckpzL1U1VzhDUGdNWHZIRVprenhzTmRtMHhXWDlmMXA0c3A4bEJzSFdTWnlPOUdQNVVWb1BWbWxRY05PcDBPbGMvcUcxbFNaUmdVS1BCQUhhZlBFOTdDY0ZJUUZYbnBCdGQzRTZUWm5RSk4wMm9IQngxZU5ETVA4bEZMenVFR0E9PSIsImkiOiJpZGNQNDR0d252RVV6MGJvelVmb0J3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c178549b7-ff53-433f-8cbb-4a0c888322e7", "record_id": "flaws_cloudtrail:0000203:c178549b7-ff53-433f-8cbb-4a0c888322e7", "row_index": 203, "timestamp": "2017-03-01T01:37:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1040, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c178549b7-ff53-433f-8cbb-4a0c888322e7", "eventTime": "2017-03-01T01:37:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJCMHBwejErS0plcW5wRnJZK3pTNEVKNi9IRHNGby93cTBuNDZlRXIxZEI5OVNnZVllaDRINy9yVEVDVW1oaWxRY21XS0NOVVJZeW5tK0pZbmJXWVdEOTJWdWZab1VFTCt1Si9paVNyQTlPUGQyL3NQWE41dTAyUDNnTWE4RHRCQU1kb1M4b0lQTEc4M2lZNVBFMnZkNWc9PSIsImkiOiJmYTVTb2xGdUVjRUlqa3BMNGRMTFJRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6013fe4-d0a2-430b-a238-e4443fa18bbd", "record_id": "flaws_cloudtrail:0000204:b6013fe4-d0a2-430b-a238-e4443fa18bbd", "row_index": 204, "timestamp": "2017-03-01T01:37:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZXSY62OLK5OGOHUM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "216.95.35.160", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 544, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6013fe4-d0a2-430b-a238-e4443fa18bbd", "eventTime": "2017-03-01T01:37:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.95.35.160", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZXSY62OLK5OGOHUM", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "833eacea-033a-444b-a528-b312ac4a8e01", "record_id": "flaws_cloudtrail:0000205:833eacea-033a-444b-a528-b312ac4a8e01", "row_index": 205, "timestamp": "2017-03-01T01:38:20Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "31.2.9.0", "user_agent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "833eacea-033a-444b-a528-b312ac4a8e01", "eventTime": "2017-03-01T01:38:20Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "31.2.9.0", "userAgent": "aws-cli/1.11.45 Python/3.6.0 Linux/4.9.8-1-ARCH botocore/1.5.8", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d23a17a-0892-4ea7-9555-062f1c71494e", "record_id": "flaws_cloudtrail:0000206:0d23a17a-0892-4ea7-9555-062f1c71494e", "row_index": 206, "timestamp": "2017-03-01T01:38:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZXSY62OLK5OGOHUM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "216.95.35.160", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 548, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d23a17a-0892-4ea7-9555-062f1c71494e", "eventTime": "2017-03-01T01:38:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.95.35.160", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZXSY62OLK5OGOHUM", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f514a7f-d6a7-441e-b401-e5a79f70fc85", "record_id": "flaws_cloudtrail:0000207:3f514a7f-d6a7-441e-b401-e5a79f70fc85", "row_index": 207, "timestamp": "2017-03-01T01:39:47Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZXSY62OLK5OGOHUM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "216.95.35.160", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-5466"], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f514a7f-d6a7-441e-b401-e5a79f70fc85", "eventTime": "2017-03-01T01:39:47Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.95.35.160", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZXSY62OLK5OGOHUM", "userName": "backup"}, "requestParameters": {"name": "trail-5466"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-5466"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45cf70ea-3445-4eb1-ac0f-0e851fe6d237", "record_id": "flaws_cloudtrail:0000208:45cf70ea-3445-4eb1-ac0f-0e851fe6d237", "row_index": 208, "timestamp": "2017-03-01T01:41:32Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZXSY62OLK5OGOHUM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "216.95.35.160", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-5466"], "raw_record_size_bytes": 670, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45cf70ea-3445-4eb1-ac0f-0e851fe6d237", "eventTime": "2017-03-01T01:41:32Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.95.35.160", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZXSY62OLK5OGOHUM", "userName": "backup"}, "requestParameters": {"name": "trail-5466"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-5466"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37977f69-775a-4f7d-9020-9793ceba56b1", "record_id": "flaws_cloudtrail:0000209:37977f69-775a-4f7d-9020-9793ceba56b1", "row_index": 209, "timestamp": "2017-03-01T01:43:25Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZXSY62OLK5OGOHUM", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "216.95.35.160", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-5466"], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37977f69-775a-4f7d-9020-9793ceba56b1", "eventTime": "2017-03-01T01:43:25Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.95.35.160", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZXSY62OLK5OGOHUM", "userName": "backup"}, "requestParameters": {"name": "trail-5466", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-5466"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f720af3-e345-45f1-bbb5-5809d32fb04a", "record_id": "flaws_cloudtrail:0000210:6f720af3-e345-45f1-bbb5-5809d32fb04a", "row_index": 210, "timestamp": "2017-03-01T02:03:53Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1213, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f720af3-e345-45f1-bbb5-5809d32fb04a", "eventTime": "2017-03-01T02:03:53Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAA2PPGR4AEAQQPCR", "expiration": "Mar 1, 2017 2:03:53 PM", "sessionToken": "FQoDYXdzEGsaDAzGih5iXyAycthN+SLfAUeu2LQ/MVCctBmsFvfhU6asOQ/CGtHLxNHUQUEQUl2RVVAGJfN6GVNcAyhSFhZZ047oY9tNLnycNtw9THKeR8WZ1nKYINcQ7lFuTm0kXnFQV5brI7INg/IRwLup7gPyktYZ5lNC1eG+zO1mv7EjLuZW/0/8QYMVcVowPfndXg78+nziaLFpqbGNYsj8vNJw3nKTDlKZqvjVUs5ALTwQ9ibqUW3p3jGs5br1vzIk0C5PgcVxE0/C7GtAZvnamQsqD26qUl3rEPYbopXQM275x5QvVex64MqU0JNsyPLwI44oidjYxQU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f4c9b88-c341-40a3-9ec9-58f43f32164", "record_id": "flaws_cloudtrail:0000211:5f4c9b88-c341-40a3-9ec9-58f43f32164", "row_index": 211, "timestamp": "2017-03-01T02:29:45Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1476, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f4c9b88-c341-40a3-9ec9-58f43f32164", "eventTime": "2017-03-01T02:29:45Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA3OOGLJXK2BFM346W", "expiration": "Mar 1, 2017 8:48:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c7cae80-787d-478f-85df-2c1e58d4e0ff", "record_id": "flaws_cloudtrail:0000212:7c7cae80-787d-478f-85df-2c1e58d4e0ff", "row_index": 212, "timestamp": "2017-03-01T02:31:29Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c7cae80-787d-478f-85df-2c1e58d4e0ff", "eventTime": "2017-03-01T02:31:29Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc854ae2-a5b7-4fca-b671-3f13a43e268c", "record_id": "flaws_cloudtrail:0000213:bc854ae2-a5b7-4fca-b671-3f13a43e268c", "row_index": 213, "timestamp": "2017-03-01T02:31:36Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc854ae2-a5b7-4fca-b671-3f13a43e268c", "eventTime": "2017-03-01T02:31:36Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad6a62b2-b822-4443-aab7-a271726da4", "record_id": "flaws_cloudtrail:0000214:ad6a62b2-b822-4443-aab7-a271726da4", "row_index": 214, "timestamp": "2017-03-01T02:35:03Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.239.132.95", "user_agent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad6a62b2-b822-4443-aab7-a271726da4", "eventTime": "2017-03-01T02:35:03Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cccfe0ca-8a09-41fb-8806-cf8cabd78002", "record_id": "flaws_cloudtrail:0000215:cccfe0ca-8a09-41fb-8806-cf8cabd78002", "row_index": 215, "timestamp": "2017-03-01T02:58:24Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cccfe0ca-8a09-41fb-8806-cf8cabd78002", "eventTime": "2017-03-01T02:58:24Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9a7473f-b092-4df5-ac4b-edab7c7bdbc7", "record_id": "flaws_cloudtrail:0000216:d9a7473f-b092-4df5-ac4b-edab7c7bdbc7", "row_index": 216, "timestamp": "2017-03-01T02:59:04Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9a7473f-b092-4df5-ac4b-edab7c7bdbc7", "eventTime": "2017-03-01T02:59:04Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dbff5e4-14d7-4f6f-bab0-fb0c9d9c603b", "record_id": "flaws_cloudtrail:0000217:4dbff5e4-14d7-4f6f-bab0-fb0c9d9c603b", "row_index": 217, "timestamp": "2017-03-01T02:59:25Z", "event_type": "GetPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dbff5e4-14d7-4f6f-bab0-fb0c9d9c603b", "eventTime": "2017-03-01T02:59:25Z", "eventName": "GetPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6cb601630-973f-4269-9036-9006dc9fa887", "record_id": "flaws_cloudtrail:0000218:6cb601630-973f-4269-9036-9006dc9fa887", "row_index": 218, "timestamp": "2017-03-01T02:59:46Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6cb601630-973f-4269-9036-9006dc9fa887", "eventTime": "2017-03-01T02:59:46Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3959d30-5da0-4c35-a8cd-9852ac89c531", "record_id": "flaws_cloudtrail:0000219:f3959d30-5da0-4c35-a8cd-9852ac89c531", "row_index": 219, "timestamp": "2017-03-01T03:00:08Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3959d30-5da0-4c35-a8cd-9852ac89c531", "eventTime": "2017-03-01T03:00:08Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c327875-82e0-47cc-b177-34aff5b10f96", "record_id": "flaws_cloudtrail:0000220:1c327875-82e0-47cc-b177-34aff5b10f96", "row_index": 220, "timestamp": "2017-03-01T03:00:35Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c327875-82e0-47cc-b177-34aff5b10f96", "eventTime": "2017-03-01T03:00:35Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16fc9205-6250-4299-b82d-504a4b363714", "record_id": "flaws_cloudtrail:0000221:16fc9205-6250-4299-b82d-504a4b363714", "row_index": 221, "timestamp": "2017-03-01T03:00:47Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16fc9205-6250-4299-b82d-504a4b363714", "eventTime": "2017-03-01T03:00:47Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0416b89-44e0-408a-8b3c-94fb8fac5053", "record_id": "flaws_cloudtrail:0000222:c0416b89-44e0-408a-8b3c-94fb8fac5053", "row_index": 222, "timestamp": "2017-03-01T03:00:51Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0416b89-44e0-408a-8b3c-94fb8fac5053", "eventTime": "2017-03-01T03:00:51Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89022c1-7869-4519-9386-c0c7a2775bfe", "record_id": "flaws_cloudtrail:0000223:89022c1-7869-4519-9386-c0c7a2775bfe", "row_index": 223, "timestamp": "2017-03-01T03:01:22Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89022c1-7869-4519-9386-c0c7a2775bfe", "eventTime": "2017-03-01T03:01:22Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a1b92be-a729-4f6d-b0ba-479b45c9ca76", "record_id": "flaws_cloudtrail:0000224:7a1b92be-a729-4f6d-b0ba-479b45c9ca76", "row_index": 224, "timestamp": "2017-03-01T03:01:26Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a1b92be-a729-4f6d-b0ba-479b45c9ca76", "eventTime": "2017-03-01T03:01:26Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0727da77-45af-4a43-ba15-c7854c9c62eb", "record_id": "flaws_cloudtrail:0000225:0727da77-45af-4a43-ba15-c7854c9c62eb", "row_index": 225, "timestamp": "2017-03-01T03:01:59Z", "event_type": "GetPolicy202224v2", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "250.200.111.253", "user_agent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0727da77-45af-4a43-ba15-c7854c9c62eb", "eventTime": "2017-03-01T03:01:59Z", "eventName": "GetPolicy202224v2", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "250.200.111.253", "userAgent": "aws-cli/1.11.12 Python/2.7.10 Darwin/16.4.0 botocore/1.4.69", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"functionName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c737191-56bb-4dec-bfb8-2134b989afee", "record_id": "flaws_cloudtrail:0000226:4c737191-56bb-4dec-bfb8-2134b989afee", "row_index": 226, "timestamp": "2017-03-01T03:29:46Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1476, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c737191-56bb-4dec-bfb8-2134b989afee", "eventTime": "2017-03-01T03:29:46Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA61233R9OGM7X235B", "expiration": "Mar 1, 2017 9:45:37 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5264d43-effe-4270-bb07-8891eb026d80", "record_id": "flaws_cloudtrail:0000227:e5264d43-effe-4270-bb07-8891eb026d80", "row_index": 227, "timestamp": "2017-03-01T04:13:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA61233R9OGM7X235B", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "3.239.132.95", "user_agent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 984, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5264d43-effe-4270-bb07-8891eb026d80", "eventTime": "2017-03-01T04:13:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA61233R9OGM7X235B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-01T03:29:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e63408-fef4-4e95-bc5e-242efd6844ef", "record_id": "flaws_cloudtrail:0000228:e63408-fef4-4e95-bc5e-242efd6844ef", "row_index": 228, "timestamp": "2017-03-01T04:13:42Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA61233R9OGM7X235B", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "3.239.132.95", "user_agent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 981, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e63408-fef4-4e95-bc5e-242efd6844ef", "eventTime": "2017-03-01T04:13:42Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA61233R9OGM7X235B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-01T03:29:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f065d421-ad70-4781-8200-d91c4a3ba859", "record_id": "flaws_cloudtrail:0000229:f065d421-ad70-4781-8200-d91c4a3ba859", "row_index": 229, "timestamp": "2017-03-01T04:14:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "account_id": "811596193553", "principal_id": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "user_name": null, "access_key_id": "ASIA61233R9OGM7X235B", "session_issuer_arn": "arn:aws:iam::811596193553:role/flaws", "session_issuer_user_name": "flaws"}, "network": {"source_ip": "3.239.132.95", "user_agent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 983, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f065d421-ad70-4781-8200-d91c4a3ba859", "eventTime": "2017-03-01T04:14:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.239.132.95", "userAgent": "[aws-cli/1.7.36 Python/2.7.11 Linux/4.4.0-34-generic]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "AssumedRole", "principalId": "AROACW5CSA8C8WHOB3O7Q:i-aa2d3b42e5c6e801a", "arn": "arn:aws:sts::811596193553:assumed-role/flaws/i-aa2d3b42e5c6e801a", "accountId": "811596193553", "accessKeyId": "ASIA61233R9OGM7X235B", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-01T03:29:46Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROACW5CSA8C8WHOB3O7Q", "arn": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "userName": "flaws"}}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e13524-3dc5-4d51-a512-e8c0026f3970", "record_id": "flaws_cloudtrail:0000230:e13524-3dc5-4d51-a512-e8c0026f3970", "row_index": 230, "timestamp": "2017-03-01T04:29:47Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1477, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e13524-3dc5-4d51-a512-e8c0026f3970", "eventTime": "2017-03-01T04:29:47Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA16SZBDH5XHKVOXGH", "expiration": "Mar 1, 2017 10:41:15 AM", "sessionToken": "FQoDYXdzEG4aDG1kjz1dAkN5ShBb8iK3A23dX0iF5I0/c2n7UXejwCjHy15XKAI0Yn0V5g9UcAkMhQ5e2LTIBqBH2VG2uyG/ovKmcI0+UcYrj269730Jy+66ydtqILmuNsKDholhM0+tcgRkUwPXIRvR6/HV5b17mhH2dIXALbAa9NCI6ogqRqmqJcPAR0c4HOzRdMuGK2M/AcvFSGbBLQA1sZD9yllvCIp3509j9wvN4wndittNe4bi9URGQdB2yhXT4jiW/gBcsPbmaXX7ysit2MUP93IonjaCDBDVJYkK4hLiyitHuv4bqIBxTLjfU7dEIgFIZJA7ISYLUtxPD4qX9ss/YMvnsjdPGxT3xRDAUoIbyJYZceKyQV6ISC1KKsnVd59ReHsOMyvII4slLUWRe3aQHzE7i3m2IN0QpEeE2HCGAco3jGdhmq8muQH+kAcwX8iuQamAU5JV9E988CvrpDaFiErHDcENTybpW6tl0J9aENl2d16m38mrPq6Y6/3hX5lD3m8j98Uh3z4fK8mK6QyBUzM1KRuSZshQaui48fDRzfWRUYu/aHsY42FvRpJ1AP+SdXY2mhO2issYT0lfJUOLY56kUWB07gynKhhwou5zZxQU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "165468dd1-fcf5-4daf-ada5-f8ecf751b9f6", "record_id": "flaws_cloudtrail:0000231:165468dd1-fcf5-4daf-ada5-f8ecf751b9f6", "row_index": 231, "timestamp": "2017-03-01T05:00:19Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "216.1.242.211", "user_agent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-63-generic botocore/1.4.70]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 652, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "165468dd1-fcf5-4daf-ada5-f8ecf751b9f6", "eventTime": "2017-03-01T05:00:19Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "216.1.242.211", "userAgent": "[aws-cli/1.11.13 Python/3.5.2 Linux/4.4.0-63-generic botocore/1.4.70]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1088c1c0-fbfb-4bb6-b3d1-0b9a0d164b34", "record_id": "flaws_cloudtrail:0000232:1088c1c0-fbfb-4bb6-b3d1-0b9a0d164b34", "row_index": 232, "timestamp": "2017-03-01T05:02:13Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAAA2PPGR4AEAQQPCR", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "254.6.3.255", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1028, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1088c1c0-fbfb-4bb6-b3d1-0b9a0d164b34", "eventTime": "2017-03-01T05:02:13Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "254.6.3.255", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAAA2PPGR4AEAQQPCR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-01T02:03:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2017/03/01/[$LATEST]e2732bd281e072dd029db37e8d9d7487"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de5cf2ba-8ec7-4b56-9b1b-ef74a5cc12a1", "record_id": "flaws_cloudtrail:0000233:de5cf2ba-8ec7-4b56-9b1b-ef74a5cc12a1", "row_index": 233, "timestamp": "2017-03-01T05:29:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1477, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de5cf2ba-8ec7-4b56-9b1b-ef74a5cc12a1", "eventTime": "2017-03-01T05:29:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAUCQ7HJ35QEZQT4TI", "expiration": "Mar 1, 2017 11:40:10 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a8a636e-73c8-40de-ba23-22d74769a9", "record_id": "flaws_cloudtrail:0000234:0a8a636e-73c8-40de-ba23-22d74769a9", "row_index": 234, "timestamp": "2017-03-01T06:02:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "43.62.20.148", "user_agent": "[aws-cli/1.7.39 Python/2.7.10 Darwin/15.6.0]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 623, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a8a636e-73c8-40de-ba23-22d74769a9", "eventTime": "2017-03-01T06:02:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "43.62.20.148", "userAgent": "[aws-cli/1.7.39 Python/2.7.10 Darwin/15.6.0]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "426625f1-b25d-4872-a559-c7c9f424902b4", "record_id": "flaws_cloudtrail:0000235:426625f1-b25d-4872-a559-c7c9f424902b4", "row_index": 235, "timestamp": "2017-03-01T06:02:49Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "43.62.20.148", "user_agent": "aws-cli/1.7.39 Python/2.7.10 Darwin/15.6.0", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "426625f1-b25d-4872-a559-c7c9f424902b4", "eventTime": "2017-03-01T06:02:49Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "43.62.20.148", "userAgent": "aws-cli/1.7.39 Python/2.7.10 Darwin/15.6.0", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bef6999f-7eef-4b3a-8dff-fa8f9ff85337", "record_id": "flaws_cloudtrail:0000236:bef6999f-7eef-4b3a-8dff-fa8f9ff85337", "row_index": 236, "timestamp": "2017-03-01T06:04:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "208.26.200.252", "user_agent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bef6999f-7eef-4b3a-8dff-fa8f9ff85337", "eventTime": "2017-03-01T06:04:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "208.26.200.252", "userAgent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b7e2007-78d6-449f-b4ff-b906896c5af7", "record_id": "flaws_cloudtrail:0000237:4b7e2007-78d6-449f-b4ff-b906896c5af7", "row_index": 237, "timestamp": "2017-03-01T06:04:23Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "208.26.200.252", "user_agent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b7e2007-78d6-449f-b4ff-b906896c5af7", "eventTime": "2017-03-01T06:04:23Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "208.26.200.252", "userAgent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddd5705e-c70b-400d-97c2-18cd00cbca62", "record_id": "flaws_cloudtrail:0000238:ddd5705e-c70b-400d-97c2-18cd00cbca62", "row_index": 238, "timestamp": "2017-03-01T06:05:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "208.26.200.252", "user_agent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddd5705e-c70b-400d-97c2-18cd00cbca62", "eventTime": "2017-03-01T06:05:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "208.26.200.252", "userAgent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4aec6259-7a26-439c-9584-79861e9678", "record_id": "flaws_cloudtrail:0000239:4aec6259-7a26-439c-9584-79861e9678", "row_index": 239, "timestamp": "2017-03-01T06:05:05Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "208.26.200.252", "user_agent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1051, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4aec6259-7a26-439c-9584-79861e9678", "eventTime": "2017-03-01T06:05:05Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "208.26.200.252", "userAgent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJlMTFwbFZsaWtLNEZ4Y2pNeVdjS2VTb3RScWVZWDd6WW8xQXNUdUpMeGhZL1JBWnNHam9LajhWYlhTMHlxdDNOSUg1U3ZrcnB2OXFBQituRjZJY1pFNlJML1ZrYldmMS9iSU1YbG5iMVcxVGdNd1BsNlgzZExGdGloZUdFVERCUm9UWHY1RTVEdkNDRU9JdFdJYUVTamc9PSIsImkiOiJpUjhCRWMrUjl6anpHdWR2NXNrcUl3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e78d4b2-c3e0-4fbb-b1a2-fe621dccd667", "record_id": "flaws_cloudtrail:0000240:5e78d4b2-c3e0-4fbb-b1a2-fe621dccd667", "row_index": 240, "timestamp": "2017-03-01T06:05:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "208.26.200.252", "user_agent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1052, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e78d4b2-c3e0-4fbb-b1a2-fe621dccd667", "eventTime": "2017-03-01T06:05:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "208.26.200.252", "userAgent": "aws-cli/1.11.56 Python/2.7.12+ Linux/4.6.0-kali1-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJWNWY5K054OVd0bWkvd1NjUExYNEVjbE1rdmtKTjdwNk9WMHpPZWdoazNCd2RlcFA5TjdkMC9Tejc3T2N3SG1VajFEVzBCWW9KeCtqZXpGMWFRb1lOc2ZvV1ZNeGJZaEk1ODNKd2tvOFN0R2w3SDE0R0E5c0I3YzNTVVN6NjlCSVNaNDV2SmxuTW1iRmw5anA0SHBPZnc9PSIsImkiOiIyYXVkc0U0UmM1Ym5Da3grSzhnUWp3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bf0f792-18c7-44b3-a1e9-db4e0cea10d1", "record_id": "flaws_cloudtrail:0000241:2bf0f792-18c7-44b3-a1e9-db4e0cea10d1", "row_index": 241, "timestamp": "2017-03-01T06:29:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1478, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bf0f792-18c7-44b3-a1e9-db4e0cea10d1", "eventTime": "2017-03-01T06:29:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIA7I6VVN4SKJE1GKE8", "expiration": "Mar 1, 2017 12:30:07 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26a4357e-1fe6-4f71-918e-c5c5474229e8", "record_id": "flaws_cloudtrail:0000242:26a4357e-1fe6-4f71-918e-c5c5474229e8", "row_index": 242, "timestamp": "2017-03-01T07:06:21Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "[aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 648, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26a4357e-1fe6-4f71-918e-c5c5474229e8", "eventTime": "2017-03-01T07:06:21Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "[aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34a9ba0f-9fc5-4888-b776-7e619c7975d5", "record_id": "flaws_cloudtrail:0000243:34a9ba0f-9fc5-4888-b776-7e619c7975d5", "row_index": 243, "timestamp": "2017-03-01T07:12:33Z", "event_type": "DescribeHosts", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34a9ba0f-9fc5-4888-b776-7e619c7975d5", "eventTime": "2017-03-01T07:12:33Z", "eventName": "DescribeHosts", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"DescribeHostsRequest": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25dfeb41-5915-421e-914e-34a69109352b", "record_id": "flaws_cloudtrail:0000244:25dfeb41-5915-421e-914e-34a69109352b", "row_index": 244, "timestamp": "2017-03-01T07:12:52Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25dfeb41-5915-421e-914e-34a69109352b", "eventTime": "2017-03-01T07:12:52Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b7211b2-3471-454e-9c0c-de22ab9aa8c3", "record_id": "flaws_cloudtrail:0000245:3b7211b2-3471-454e-9c0c-de22ab9aa8c3", "row_index": 245, "timestamp": "2017-03-01T07:12:55Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1044, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b7211b2-3471-454e-9c0c-de22ab9aa8c3", "eventTime": "2017-03-01T07:12:55Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJzUzFKVXZmVThnaTEyRkpZRWt1OEZsVVp1RytBbmRpTGtrVkFlMTNFUE5iSW9LUk56YkFDWC9xVjgrczViQnBFWnNlTlRwckcvbEFtVlpkL3JMdHNia2F3ZEpjKzFxYXhobjFaTnA2eUwzS3M1NUJjci8xSW8vWllHOHlqVGlDSzNpN0krYmUyK3BzUHNKMjhMTWRBSkE9PSIsImkiOiJDcW5ubDMwNU94MzFFdldtS2JnRWN3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44c610dc-52e7-49fb-97af-80c0d3ee523c", "record_id": "flaws_cloudtrail:0000246:44c610dc-52e7-49fb-97af-80c0d3ee523c", "row_index": 246, "timestamp": "2017-03-01T07:12:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44c610dc-52e7-49fb-97af-80c0d3ee523c", "eventTime": "2017-03-01T07:12:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIxdndOcTJWNStNZkpXVGc4aW9wcURaY3Y4Z04xZ05YZkgwZTJPMVFhK2Z6akNOeEN1anlUVm50Y3BkdFFaeWN4UHZNWG5sbGdNTTJKUGRpdStEVnRhTkd5TFNXS0szdFlOMWwwVkg3YlA5S3p1SHorUUt2VFM5RTZGL1M3M3ZtLzR0eGpNTUt6YlV5QUdrWTVuRndqZnc9PSIsImkiOiJsUnJaNGVyMmsxLzY2ZlBqVXJodmxBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bef50626-d4d6-40f5-a2b1-1eadcadc9742", "record_id": "flaws_cloudtrail:0000247:bef50626-d4d6-40f5-a2b1-1eadcadc9742", "row_index": 247, "timestamp": "2017-03-01T07:13:01Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bef50626-d4d6-40f5-a2b1-1eadcadc9742", "eventTime": "2017-03-01T07:13:01Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiIzTTFFVlNTOHM4OVVURmdwVjh4c1JaZFlrYWd0Y0t5LzVCUCtUajJXdmlKSHdwNmk4cDJHYlBMVTU0UzJiTWlDWFcvNlhwMWhiK2FzYVdBSXc2ZWZ4L3BXay9GM2lPQnk1OUM3cGVZVnVOZTVUS3NWZ0hMVkg2YmZ1QndHQXZ2ZCs1a0sxK3N5WGpsSTU4TEZaUjdXY1E9PSIsImkiOiJ3clFmc09xeTN5bE5taEt2WkFxQ3VBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60a0a0ca-5922-42f3-b63e-718612cc5c50", "record_id": "flaws_cloudtrail:0000248:60a0a0ca-5922-42f3-b63e-718612cc5c50", "row_index": 248, "timestamp": "2017-03-01T07:13:04Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1047, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60a0a0ca-5922-42f3-b63e-718612cc5c50", "eventTime": "2017-03-01T07:13:04Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJweFZteC9henlnZzZxNDNrVDd2NFlIbkJkelM4cGhLNVc5UGxEcFhGb1NsUWQ2cEozNTBpWDJhT1E0Y05EV1VkdjhBYm1acGUzNWdGT0RyZGRwMXJoYnBzOWlXdGhmMkpMTEY3N2EzSjhSNWN1Q0lzMWJHYkxOVGx5VENaMTJweEtBLzRVejl0bmxGTlk3UHFyVDBhVUE9PSIsImkiOiIvZVFCOFBVTmMrNUJHQ01XeGtZQlBRPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc940fc5-7481-48a8-adb9-4322d70125", "record_id": "flaws_cloudtrail:0000249:bc940fc5-7481-48a8-adb9-4322d70125", "row_index": 249, "timestamp": "2017-03-01T07:13:07Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1045, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc940fc5-7481-48a8-adb9-4322d70125", "eventTime": "2017-03-01T07:13:07Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJyMDlyOS9jMmY1MkV6UHJKOTNZZkJRUnczNWlVMGhMSElIakVVWmU0Mk1UOEhvbkFMUGYzc2QwdTFSZ2ZMNEhMbHJ5ck1HT1RmUmNxamdJVGtpZDhIZ29OWDNVZDBYejFGd2t0eTJFMzRaRXZ2Z2RYMjZ6RlpIVGMwVlZwakFqWEhrK2dyNmNwekIydzZhcjVHMVNPc1E9PSIsImkiOiJVK2RiUXRNUG5GWkt1Y1Q3Y09odUF3PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3d340043-9fe9-442e-a674-a2ec4fe5278d", "record_id": "flaws_cloudtrail:0000250:c3d340043-9fe9-442e-a674-a2ec4fe5278d", "row_index": 250, "timestamp": "2017-03-01T07:13:11Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1049, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3d340043-9fe9-442e-a674-a2ec4fe5278d", "eventTime": "2017-03-01T07:13:11Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJ1R29TQXd1SVdSaDdyVnRrbStDcGFtdS9iNGl1NGEwMkpMZmxXNnEzZlFpWGJYV3ZPZWNROUFoQzdXUFNSMUNTU0QrUC9NSVduL0ZZWXV3V1RYQkpmNmVIeDBSZ2tyNXpYMHFSRjNlMFQ1bFRNMTlQT0JvK3BQbUNFT3dzeEM0dVRoZUlGaW55T2pFSzlYK3VMS3JBeFE9PSIsImkiOiJ2ZWNodnNVd3NZN1o0NUNpTlg4WkFBPT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66eeec51-fb24-49fa-a64f-424b84cc7d97", "record_id": "flaws_cloudtrail:0000251:66eeec51-fb24-49fa-a64f-424b84cc7d97", "row_index": 251, "timestamp": "2017-03-01T07:13:13Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1048, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66eeec51-fb24-49fa-a64f-424b84cc7d97", "eventTime": "2017-03-01T07:13:13Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eyJ2IjoiMSIsImMiOiJNTHcwaGw3N2tjT1hzbUxNUEwxbnU0Ymt4Qmd6TzlaM2NyMVhDRkVuOFA0bFl1NUY1c2VMOTdDazhKN0pVVzZrelFVNHd3enYydGc5YXYrL2xFbEYvTy9mRUc4N2pXeExLekcxK1V5YU1sWXQ4N25IaW52a1VnQnBOR1BNTU9iajBPK28xMEh1ZWl2TUFxZmE1ZHB2WlE9PSIsImkiOiIwcGVXYi96ZWpOTGtwdWowZlNpZU13PT0iLCJzIjoiMSJ9", "maxResults": 1000, "snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "160797e87-9cde-4171-9d8f-c9691897bff7", "record_id": "flaws_cloudtrail:0000252:160797e87-9cde-4171-9d8f-c9691897bff7", "row_index": 252, "timestamp": "2017-03-01T07:17:53Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "160797e87-9cde-4171-9d8f-c9691897bff7", "eventTime": "2017-03-01T07:17:53Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {"items": [{"snapshotId": "snap-83d15d668fb2941db"}]}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ab298d-a170-486f-ba35-034a3e57b9ac", "record_id": "flaws_cloudtrail:0000253:13ab298d-a170-486f-ba35-034a3e57b9ac", "row_index": 253, "timestamp": "2017-03-01T07:18:37Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "[aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 630, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ab298d-a170-486f-ba35-034a3e57b9ac", "eventTime": "2017-03-01T07:18:37Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "[aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bad066ba-2cfc-4ec9-b1af-f7bdda06f750", "record_id": "flaws_cloudtrail:0000254:bad066ba-2cfc-4ec9-b1af-f7bdda06f750", "row_index": 254, "timestamp": "2017-03-01T07:19:28Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bad066ba-2cfc-4ec9-b1af-f7bdda06f750", "eventTime": "2017-03-01T07:19:28Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6525d29e-5953-4d11-aa69-30fc9e3dd71c", "record_id": "flaws_cloudtrail:0000255:6525d29e-5953-4d11-aa69-30fc9e3dd71c", "row_index": 255, "timestamp": "2017-03-01T07:19:48Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6525d29e-5953-4d11-aa69-30fc9e3dd71c", "eventTime": "2017-03-01T07:19:48Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c19209-4d42-462f-a6e7-cb3c1251dc7f", "record_id": "flaws_cloudtrail:0000256:7c19209-4d42-462f-a6e7-cb3c1251dc7f", "row_index": 256, "timestamp": "2017-03-01T07:21:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c19209-4d42-462f-a6e7-cb3c1251dc7f", "eventTime": "2017-03-01T07:21:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe7f7da-73c3-4836-8525-62da4bb03740", "record_id": "flaws_cloudtrail:0000257:2fe7f7da-73c3-4836-8525-62da4bb03740", "row_index": 257, "timestamp": "2017-03-01T07:22:14Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe7f7da-73c3-4836-8525-62da4bb03740", "eventTime": "2017-03-01T07:22:14Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d912f535-bd8d-40e1-892f-beecb14ef723", "record_id": "flaws_cloudtrail:0000258:d912f535-bd8d-40e1-892f-beecb14ef723", "row_index": 258, "timestamp": "2017-03-01T07:24:42Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d912f535-bd8d-40e1-892f-beecb14ef723", "eventTime": "2017-03-01T07:24:42Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ea448fc-9b71-4609-abd9-eade9a03a97a", "record_id": "flaws_cloudtrail:0000259:3ea448fc-9b71-4609-abd9-eade9a03a97a", "row_index": 259, "timestamp": "2017-03-01T07:24:43Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ea448fc-9b71-4609-abd9-eade9a03a97a", "eventTime": "2017-03-01T07:24:43Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41d235a8-1c5f-444d-a28f-e042f7697c9a", "record_id": "flaws_cloudtrail:0000260:41d235a8-1c5f-444d-a28f-e042f7697c9a", "row_index": 260, "timestamp": "2017-03-01T07:24:43Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41d235a8-1c5f-444d-a28f-e042f7697c9a", "eventTime": "2017-03-01T07:24:43Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0abd03b-f5e3-4003-8146-3d7c321f5b59", "record_id": "flaws_cloudtrail:0000261:f0abd03b-f5e3-4003-8146-3d7c321f5b59", "row_index": 261, "timestamp": "2017-03-01T07:24:44Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 667, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0abd03b-f5e3-4003-8146-3d7c321f5b59", "eventTime": "2017-03-01T07:24:44Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a32f78b7-6156-4380-9ebc-d0283028eee2", "record_id": "flaws_cloudtrail:0000262:a32f78b7-6156-4380-9ebc-d0283028eee2", "row_index": 262, "timestamp": "2017-03-01T07:24:45Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a32f78b7-6156-4380-9ebc-d0283028eee2", "eventTime": "2017-03-01T07:24:45Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4903dd5d-37f9-419f-8b19-74c172425ccf9", "record_id": "flaws_cloudtrail:0000263:4903dd5d-37f9-419f-8b19-74c172425ccf9", "row_index": 263, "timestamp": "2017-03-01T07:24:45Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4903dd5d-37f9-419f-8b19-74c172425ccf9", "eventTime": "2017-03-01T07:24:45Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9cb8407-3fe9-4610-963b-9e0523f098ea", "record_id": "flaws_cloudtrail:0000264:a9cb8407-3fe9-4610-963b-9e0523f098ea", "row_index": 264, "timestamp": "2017-03-01T07:24:46Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9cb8407-3fe9-4610-963b-9e0523f098ea", "eventTime": "2017-03-01T07:24:46Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dc32712-8fc0-4cc1-8a41-47a0254fbb32", "record_id": "flaws_cloudtrail:0000265:2dc32712-8fc0-4cc1-8a41-47a0254fbb32", "row_index": 265, "timestamp": "2017-03-01T07:24:52Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAAA2PPGR4AEAQQPCR", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "8.86.251.155", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dc32712-8fc0-4cc1-8a41-47a0254fbb32", "eventTime": "2017-03-01T07:24:52Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "8.86.251.155", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAAA2PPGR4AEAQQPCR", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2017-03-01T02:03:53Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logStreamName": "2017/03/01/[$LATEST]671f5c9ddbe1ed0a25b6abcc2d022c6f", "logGroupName": "/aws/lambda/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4617e4f9-1ce0-48ef-9401-efa022007ee56", "record_id": "flaws_cloudtrail:0000266:4617e4f9-1ce0-48ef-9401-efa022007ee56", "row_index": 266, "timestamp": "2017-03-01T07:24:54Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4617e4f9-1ce0-48ef-9401-efa022007ee56", "eventTime": "2017-03-01T07:24:54Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fd7de74-36ba-4fcb-9ab9-ca46f959e143", "record_id": "flaws_cloudtrail:0000267:9fd7de74-36ba-4fcb-9ab9-ca46f959e143", "row_index": 267, "timestamp": "2017-03-01T07:24:57Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fd7de74-36ba-4fcb-9ab9-ca46f959e143", "eventTime": "2017-03-01T07:24:57Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "errorCode": "Client.InvalidRequest", "errorMessage": "The request received was invalid.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73bea024-a796-4993-839e-bbf5790d161c", "record_id": "flaws_cloudtrail:0000268:73bea024-a796-4993-839e-bbf5790d161c", "row_index": 268, "timestamp": "2017-03-01T07:25:11Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73bea024-a796-4993-839e-bbf5790d161c", "eventTime": "2017-03-01T07:25:11Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2b559735-1732-475f-b745-52c63da337b3", "record_id": "flaws_cloudtrail:0000269:d2b559735-1732-475f-b745-52c63da337b3", "row_index": 269, "timestamp": "2017-03-01T07:25:12Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2b559735-1732-475f-b745-52c63da337b3", "eventTime": "2017-03-01T07:25:12Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb4f1e22-2f24-4f86-943b-58268597abc2", "record_id": "flaws_cloudtrail:0000270:cb4f1e22-2f24-4f86-943b-58268597abc2", "row_index": 270, "timestamp": "2017-03-01T07:25:13Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb4f1e22-2f24-4f86-943b-58268597abc2", "eventTime": "2017-03-01T07:25:13Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "580cc6f9-fd69-4668-971a-7c9680c70a41", "record_id": "flaws_cloudtrail:0000271:580cc6f9-fd69-4668-971a-7c9680c70a41", "row_index": 271, "timestamp": "2017-03-01T07:25:13Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "580cc6f9-fd69-4668-971a-7c9680c70a41", "eventTime": "2017-03-01T07:25:13Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b5b8bc9-3411-4104-ab55-511a0438a848", "record_id": "flaws_cloudtrail:0000272:7b5b8bc9-3411-4104-ab55-511a0438a848", "row_index": 272, "timestamp": "2017-03-01T07:25:14Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b5b8bc9-3411-4104-ab55-511a0438a848", "eventTime": "2017-03-01T07:25:14Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3ed4f3c-78ca-4251-b1b1-1ed5d8568bb4", "record_id": "flaws_cloudtrail:0000273:b3ed4f3c-78ca-4251-b1b1-1ed5d8568bb4", "row_index": 273, "timestamp": "2017-03-01T07:25:15Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3ed4f3c-78ca-4251-b1b1-1ed5d8568bb4", "eventTime": "2017-03-01T07:25:15Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9699be37-2fa4-43f0-922c-ba8e009d3d64", "record_id": "flaws_cloudtrail:0000274:9699be37-2fa4-43f0-922c-ba8e009d3d64", "row_index": 274, "timestamp": "2017-03-01T07:25:15Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9699be37-2fa4-43f0-922c-ba8e009d3d64", "eventTime": "2017-03-01T07:25:15Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e240d61f-28f3-4d1b-8aa1-883bf9ee3377", "record_id": "flaws_cloudtrail:0000275:e240d61f-28f3-4d1b-8aa1-883bf9ee3377", "row_index": 275, "timestamp": "2017-03-01T07:25:16Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "233.20.254.18", "user_agent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e240d61f-28f3-4d1b-8aa1-883bf9ee3377", "eventTime": "2017-03-01T07:25:16Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "233.20.254.18", "userAgent": "aws-cli/1.11.56 Python/2.7.9 Linux/3.16.0-4-amd64 botocore/1.5.19", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8082f334-51f3-47c9-b3ea-27789221c95c", "record_id": "flaws_cloudtrail:0000276:8082f334-51f3-47c9-b3ea-27789221c95c", "row_index": 276, "timestamp": "2017-03-01T07:25:16Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8082f334-51f3-47c9-b3ea-27789221c95c", "eventTime": "2017-03-01T07:25:16Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0d0415d-e9c1-4e68-8672-17e0550bd109", "record_id": "flaws_cloudtrail:0000277:e0d0415d-e9c1-4e68-8672-17e0550bd109", "row_index": 277, "timestamp": "2017-03-01T07:25:23Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0d0415d-e9c1-4e68-8672-17e0550bd109", "eventTime": "2017-03-01T07:25:23Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f69a48c-e108-4518-99c5-b9a64bd457ef", "record_id": "flaws_cloudtrail:0000278:3f69a48c-e108-4518-99c5-b9a64bd457ef", "row_index": 278, "timestamp": "2017-03-01T07:26:54Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f69a48c-e108-4518-99c5-b9a64bd457ef", "eventTime": "2017-03-01T07:26:54Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba7f09e9-fa19-4357-a899-5d60106", "record_id": "flaws_cloudtrail:0000279:ba7f09e9-fa19-4357-a899-5d60106", "row_index": 279, "timestamp": "2017-03-01T07:27:00Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba7f09e9-fa19-4357-a899-5d60106", "eventTime": "2017-03-01T07:27:00Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70536d-9179-4b08-b4ce-d834b45ea71f", "record_id": "flaws_cloudtrail:0000280:70536d-9179-4b08-b4ce-d834b45ea71f", "row_index": 280, "timestamp": "2017-03-01T07:27:06Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70536d-9179-4b08-b4ce-d834b45ea71f", "eventTime": "2017-03-01T07:27:06Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58af8613-55b2-4cfc-b716-c4611c61ea32", "record_id": "flaws_cloudtrail:0000281:58af8613-55b2-4cfc-b716-c4611c61ea32", "row_index": 281, "timestamp": "2017-03-01T07:27:11Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58af8613-55b2-4cfc-b716-c4611c61ea32", "eventTime": "2017-03-01T07:27:11Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa8ea7a9-a1e4-4b4c-b4c3-8c13dec207c8", "record_id": "flaws_cloudtrail:0000282:aa8ea7a9-a1e4-4b4c-b4c3-8c13dec207c8", "row_index": 282, "timestamp": "2017-03-01T07:27:17Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa8ea7a9-a1e4-4b4c-b4c3-8c13dec207c8", "eventTime": "2017-03-01T07:27:17Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0960b0f5-1ca0-4ea0-90b5-aefed351b834", "record_id": "flaws_cloudtrail:0000283:0960b0f5-1ca0-4ea0-90b5-aefed351b834", "row_index": 283, "timestamp": "2017-03-01T07:27:23Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0960b0f5-1ca0-4ea0-90b5-aefed351b834", "eventTime": "2017-03-01T07:27:23Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1928d03f-94e6-40a9-bc53-aa09ac2798dc", "record_id": "flaws_cloudtrail:0000284:1928d03f-94e6-40a9-bc53-aa09ac2798dc", "row_index": 284, "timestamp": "2017-03-01T07:27:29Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1928d03f-94e6-40a9-bc53-aa09ac2798dc", "eventTime": "2017-03-01T07:27:29Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e82f777-1157-4b82-b3a3-f352ddcb96be", "record_id": "flaws_cloudtrail:0000285:6e82f777-1157-4b82-b3a3-f352ddcb96be", "row_index": 285, "timestamp": "2017-03-01T07:27:35Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e82f777-1157-4b82-b3a3-f352ddcb96be", "eventTime": "2017-03-01T07:27:35Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58ab4a5b-5076-46b7-9082-24c354aaa6bb", "record_id": "flaws_cloudtrail:0000286:58ab4a5b-5076-46b7-9082-24c354aaa6bb", "row_index": 286, "timestamp": "2017-03-01T07:27:53Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58ab4a5b-5076-46b7-9082-24c354aaa6bb", "eventTime": "2017-03-01T07:27:53Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f12a90d5-337d-43cc-9f5f-a8e6ce71b88f", "record_id": "flaws_cloudtrail:0000287:f12a90d5-337d-43cc-9f5f-a8e6ce71b88f", "row_index": 287, "timestamp": "2017-03-01T07:29:17Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f12a90d5-337d-43cc-9f5f-a8e6ce71b88f", "eventTime": "2017-03-01T07:29:17Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25fd584a-0736-49c6-993c-9861ade804a8", "record_id": "flaws_cloudtrail:0000288:25fd584a-0736-49c6-993c-9861ade804a8", "row_index": 288, "timestamp": "2017-03-01T07:29:19Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25fd584a-0736-49c6-993c-9861ade804a8", "eventTime": "2017-03-01T07:29:19Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "201bdcad-6eea-4216-90dd-07c1a6f790dd", "record_id": "flaws_cloudtrail:0000289:201bdcad-6eea-4216-90dd-07c1a6f790dd", "row_index": 289, "timestamp": "2017-03-01T07:29:21Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "201bdcad-6eea-4216-90dd-07c1a6f790dd", "eventTime": "2017-03-01T07:29:21Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd4ba7f4-0230-48bd-945e-0463f06da66b", "record_id": "flaws_cloudtrail:0000290:dd4ba7f4-0230-48bd-945e-0463f06da66b", "row_index": 290, "timestamp": "2017-03-01T07:29:23Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd4ba7f4-0230-48bd-945e-0463f06da66b", "eventTime": "2017-03-01T07:29:23Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca2ecc41-0dfc-4ec8-954f-3a4cb525c34d", "record_id": "flaws_cloudtrail:0000291:ca2ecc41-0dfc-4ec8-954f-3a4cb525c34d", "row_index": 291, "timestamp": "2017-03-01T07:29:26Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca2ecc41-0dfc-4ec8-954f-3a4cb525c34d", "eventTime": "2017-03-01T07:29:26Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "499487f8d-7e89-4e56-9998-e000213b12d", "record_id": "flaws_cloudtrail:0000292:499487f8d-7e89-4e56-9998-e000213b12d", "row_index": 292, "timestamp": "2017-03-01T07:29:28Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "499487f8d-7e89-4e56-9998-e000213b12d", "eventTime": "2017-03-01T07:29:28Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b7e8b8f-2a2a-4c25-ad31-ea09b1aeb74f", "record_id": "flaws_cloudtrail:0000293:0b7e8b8f-2a2a-4c25-ad31-ea09b1aeb74f", "row_index": 293, "timestamp": "2017-03-01T07:29:30Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b7e8b8f-2a2a-4c25-ad31-ea09b1aeb74f", "eventTime": "2017-03-01T07:29:30Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f07c2792-1256-4e5e-996e-4cae22ae0f8c", "record_id": "flaws_cloudtrail:0000294:f07c2792-1256-4e5e-996e-4cae22ae0f8c", "row_index": 294, "timestamp": "2017-03-01T07:29:32Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f07c2792-1256-4e5e-996e-4cae22ae0f8c", "eventTime": "2017-03-01T07:29:32Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9e0dd6-d8ce-4a27-bfd6-1eb533fde387", "record_id": "flaws_cloudtrail:0000295:2b9e0dd6-d8ce-4a27-bfd6-1eb533fde387", "row_index": 295, "timestamp": "2017-03-01T07:29:35Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9e0dd6-d8ce-4a27-bfd6-1eb533fde387", "eventTime": "2017-03-01T07:29:35Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1522c758-75cf-48eb-8b3e-e471ddb2eaf7", "record_id": "flaws_cloudtrail:0000296:1522c758-75cf-48eb-8b3e-e471ddb2eaf7", "row_index": 296, "timestamp": "2017-03-01T07:29:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1522c758-75cf-48eb-8b3e-e471ddb2eaf7", "eventTime": "2017-03-01T07:29:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "243366e2a-bbed-47a0-b5d0-0a9a8ad0d7cb", "record_id": "flaws_cloudtrail:0000297:243366e2a-bbed-47a0-b5d0-0a9a8ad0d7cb", "row_index": 297, "timestamp": "2017-03-01T07:29:39Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "243366e2a-bbed-47a0-b5d0-0a9a8ad0d7cb", "eventTime": "2017-03-01T07:29:39Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a341ea11-1717-4a0f-bd11-0f607bcec4d7", "record_id": "flaws_cloudtrail:0000298:a341ea11-1717-4a0f-bd11-0f607bcec4d7", "row_index": 298, "timestamp": "2017-03-01T07:29:40Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a341ea11-1717-4a0f-bd11-0f607bcec4d7", "eventTime": "2017-03-01T07:29:40Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a85fa777-59bf-49b4-a113-cf70203", "record_id": "flaws_cloudtrail:0000299:a85fa777-59bf-49b4-a113-cf70203", "row_index": 299, "timestamp": "2017-03-01T07:29:42Z", "event_type": "DescribeLicenses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a85fa777-59bf-49b4-a113-cf70203", "eventTime": "2017-03-01T07:29:42Z", "eventName": "DescribeLicenses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "errorCode": "Client.UnsupportedOperation", "errorMessage": "The functionality you requested is not available in this region.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "592324-68b5-4c79-b547-a992903a8", "record_id": "flaws_cloudtrail:0000300:592324-68b5-4c79-b547-a992903a8", "row_index": 300, "timestamp": "2017-03-01T07:29:44Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "592324-68b5-4c79-b547-a992903a8", "eventTime": "2017-03-01T07:29:44Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4d2144eb-54aa-496f-9a1c-78edcfd25a11", "record_id": "flaws_cloudtrail:0000301:4d2144eb-54aa-496f-9a1c-78edcfd25a11", "row_index": 301, "timestamp": "2017-03-01T07:29:47Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4d2144eb-54aa-496f-9a1c-78edcfd25a11", "eventTime": "2017-03-01T07:29:47Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebf3ca78-6ea7-4496-a63d-1b51da7e9eb3", "record_id": "flaws_cloudtrail:0000302:ebf3ca78-6ea7-4496-a63d-1b51da7e9eb3", "row_index": 302, "timestamp": "2017-03-01T07:29:49Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1477, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebf3ca78-6ea7-4496-a63d-1b51da7e9eb3", "eventTime": "2017-03-01T07:29:49Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIAFNSRBFOBJ81BDWF4", "expiration": "Mar 1, 2017 1:49:39 PM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "145977a-dbf3-40ea-849a-fabd9f0e93ac", "record_id": "flaws_cloudtrail:0000303:145977a-dbf3-40ea-849a-fabd9f0e93ac", "row_index": 303, "timestamp": "2017-03-01T07:29:49Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "145977a-dbf3-40ea-849a-fabd9f0e93ac", "eventTime": "2017-03-01T07:29:49Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75376b85-dfea-47f0-9861-3e654731a42", "record_id": "flaws_cloudtrail:0000304:75376b85-dfea-47f0-9861-3e654731a42", "row_index": 304, "timestamp": "2017-03-01T07:29:51Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 663, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75376b85-dfea-47f0-9861-3e654731a42", "eventTime": "2017-03-01T07:29:51Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2650c942-023a-4f9d-8848-da31900", "record_id": "flaws_cloudtrail:0000305:2650c942-023a-4f9d-8848-da31900", "row_index": 305, "timestamp": "2017-03-01T07:29:57Z", "event_type": "DescribeAccountAttributes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2650c942-023a-4f9d-8848-da31900", "eventTime": "2017-03-01T07:29:57Z", "eventName": "DescribeAccountAttributes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"accountAttributeNameSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d3ee07c-a07d-42fa-9777-138813b9", "record_id": "flaws_cloudtrail:0000306:1d3ee07c-a07d-42fa-9777-138813b9", "row_index": 306, "timestamp": "2017-03-01T07:29:58Z", "event_type": "DescribeAddresses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d3ee07c-a07d-42fa-9777-138813b9", "eventTime": "2017-03-01T07:29:58Z", "eventName": "DescribeAddresses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"publicIpsSet": {}, "filterSet": {}, "allocationIdsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd3a19ee-17b2-4ee5-8c7f-f55ec9abeb47", "record_id": "flaws_cloudtrail:0000307:bd3a19ee-17b2-4ee5-8c7f-f55ec9abeb47", "row_index": 307, "timestamp": "2017-03-01T07:30:00Z", "event_type": "DescribeAvailabilityZones", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd3a19ee-17b2-4ee5-8c7f-f55ec9abeb47", "eventTime": "2017-03-01T07:30:00Z", "eventName": "DescribeAvailabilityZones", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"availabilityZoneSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54afc5db-067c-419d-a5b7-a4a2c72b31e8", "record_id": "flaws_cloudtrail:0000308:54afc5db-067c-419d-a5b7-a4a2c72b31e8", "row_index": 308, "timestamp": "2017-03-01T07:30:02Z", "event_type": "DescribeBundleTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54afc5db-067c-419d-a5b7-a4a2c72b31e8", "eventTime": "2017-03-01T07:30:02Z", "eventName": "DescribeBundleTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"bundlesSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb613b9d-5ba5-478b-94b6-7ea9b0fa4039", "record_id": "flaws_cloudtrail:0000309:cb613b9d-5ba5-478b-94b6-7ea9b0fa4039", "row_index": 309, "timestamp": "2017-03-01T07:30:04Z", "event_type": "DescribeConversionTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb613b9d-5ba5-478b-94b6-7ea9b0fa4039", "eventTime": "2017-03-01T07:30:04Z", "eventName": "DescribeConversionTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"conversionTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb3d1431-7102-4a20-ab61-1106b1dffcbc", "record_id": "flaws_cloudtrail:0000310:cb3d1431-7102-4a20-ab61-1106b1dffcbc", "row_index": 310, "timestamp": "2017-03-01T07:30:06Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb3d1431-7102-4a20-ab61-1106b1dffcbc", "eventTime": "2017-03-01T07:30:06Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbb5b1ff-f66e-4740-bd02-a9191ac4d9f1", "record_id": "flaws_cloudtrail:0000311:fbb5b1ff-f66e-4740-bd02-a9191ac4d9f1", "row_index": 311, "timestamp": "2017-03-01T07:30:08Z", "event_type": "DescribeDhcpOptions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbb5b1ff-f66e-4740-bd02-a9191ac4d9f1", "eventTime": "2017-03-01T07:30:08Z", "eventName": "DescribeDhcpOptions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"dhcpOptionsSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07bf531e-2816-4917-a008-4f58d00366", "record_id": "flaws_cloudtrail:0000312:07bf531e-2816-4917-a008-4f58d00366", "row_index": 312, "timestamp": "2017-03-01T07:30:09Z", "event_type": "DescribeExportTasks", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 669, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07bf531e-2816-4917-a008-4f58d00366", "eventTime": "2017-03-01T07:30:09Z", "eventName": "DescribeExportTasks", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"exportTaskIdSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34dff52c-81f4-4873-b8c0-75d473127c893", "record_id": "flaws_cloudtrail:0000313:34dff52c-81f4-4873-b8c0-75d473127c893", "row_index": 313, "timestamp": "2017-03-01T07:30:13Z", "event_type": "DescribeInstanceStatus", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34dff52c-81f4-4873-b8c0-75d473127c893", "eventTime": "2017-03-01T07:30:13Z", "eventName": "DescribeInstanceStatus", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}, "includeAllInstances": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc20363-6131-4eaa-97ea-72145d35c03a", "record_id": "flaws_cloudtrail:0000314:fc20363-6131-4eaa-97ea-72145d35c03a", "row_index": 314, "timestamp": "2017-03-01T07:30:14Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc20363-6131-4eaa-97ea-72145d35c03a", "eventTime": "2017-03-01T07:30:14Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edfb112b-be20-4166-bd4d-f967456c7de4", "record_id": "flaws_cloudtrail:0000315:edfb112b-be20-4166-bd4d-f967456c7de4", "row_index": 315, "timestamp": "2017-03-01T07:30:16Z", "event_type": "DescribeInternetGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edfb112b-be20-4166-bd4d-f967456c7de4", "eventTime": "2017-03-01T07:30:16Z", "eventName": "DescribeInternetGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"internetGatewayIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ab2dc43-8e1c-47dc-b2f2-26da9cbf2d52", "record_id": "flaws_cloudtrail:0000316:9ab2dc43-8e1c-47dc-b2f2-26da9cbf2d52", "row_index": 316, "timestamp": "2017-03-01T07:30:18Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ab2dc43-8e1c-47dc-b2f2-26da9cbf2d52", "eventTime": "2017-03-01T07:30:18Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"keySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d98cd3b2-754d-4fda-accd-ca7050ed5993", "record_id": "flaws_cloudtrail:0000317:d98cd3b2-754d-4fda-accd-ca7050ed5993", "row_index": 317, "timestamp": "2017-03-01T07:30:20Z", "event_type": "DescribeLicenses", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d98cd3b2-754d-4fda-accd-ca7050ed5993", "eventTime": "2017-03-01T07:30:20Z", "eventName": "DescribeLicenses", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "errorCode": "Client.UnsupportedOperation", "errorMessage": "The functionality you requested is not available in this region.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06d5b421-43e2-4c27-83bc-2e4285227ca0", "record_id": "flaws_cloudtrail:0000318:06d5b421-43e2-4c27-83bc-2e4285227ca0", "row_index": 318, "timestamp": "2017-03-01T07:30:21Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06d5b421-43e2-4c27-83bc-2e4285227ca0", "eventTime": "2017-03-01T07:30:21Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "080fd2b5-8c4d-4433-9cf9-edef1417e682", "record_id": "flaws_cloudtrail:0000319:080fd2b5-8c4d-4433-9cf9-edef1417e682", "row_index": 319, "timestamp": "2017-03-01T07:30:24Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "080fd2b5-8c4d-4433-9cf9-edef1417e682", "eventTime": "2017-03-01T07:30:24Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c09a547-be13-4be6-b5e8-2be2d66fb754", "record_id": "flaws_cloudtrail:0000320:4c09a547-be13-4be6-b5e8-2be2d66fb754", "row_index": 320, "timestamp": "2017-03-01T07:30:26Z", "event_type": "DescribePlacementGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c09a547-be13-4be6-b5e8-2be2d66fb754", "eventTime": "2017-03-01T07:30:26Z", "eventName": "DescribePlacementGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"placementGroupSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f96a324-ae30-4e3b-804e-5b9a5f7b3de0", "record_id": "flaws_cloudtrail:0000321:8f96a324-ae30-4e3b-804e-5b9a5f7b3de0", "row_index": 321, "timestamp": "2017-03-01T07:30:28Z", "event_type": "DescribeRegions", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 664, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f96a324-ae30-4e3b-804e-5b9a5f7b3de0", "eventTime": "2017-03-01T07:30:28Z", "eventName": "DescribeRegions", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"regionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17ac0765-25b0-4164-a0fc-49ce038c8820", "record_id": "flaws_cloudtrail:0000322:17ac0765-25b0-4164-a0fc-49ce038c8820", "row_index": 322, "timestamp": "2017-03-01T07:30:29Z", "event_type": "DescribeReservedInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17ac0765-25b0-4164-a0fc-49ce038c8820", "eventTime": "2017-03-01T07:30:29Z", "eventName": "DescribeReservedInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad74dbcc-1ba2-489f-b635-2fc3cd94c374", "record_id": "flaws_cloudtrail:0000323:ad74dbcc-1ba2-489f-b635-2fc3cd94c374", "row_index": 323, "timestamp": "2017-03-01T07:30:31Z", "event_type": "DescribeReservedInstancesListings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 989, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad74dbcc-1ba2-489f-b635-2fc3cd94c374", "eventTime": "2017-03-01T07:30:31Z", "eventName": "DescribeReservedInstancesListings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "errorCode": "Client.OptInRequired", "errorMessage": "AccountId '811596193553', You are not authorized to use the requested product. Please complete the seller registration https://portal.aws.amazon.com/ec2/ri/seller_registration?action=businessInfo.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"reservedInstancesListingSet": {}, "reservedInstancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8cefc04-de21-4cca-bc64-05aac20aed8d", "record_id": "flaws_cloudtrail:0000324:f8cefc04-de21-4cca-bc64-05aac20aed8d", "row_index": 324, "timestamp": "2017-03-01T07:30:33Z", "event_type": "DescribeReservedInstancesModifications", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8cefc04-de21-4cca-bc64-05aac20aed8d", "eventTime": "2017-03-01T07:30:33Z", "eventName": "DescribeReservedInstancesModifications", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"reservedInstancesModificationSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95eb3506-21f3-4ccb-abf0-54ecb8e54c23", "record_id": "flaws_cloudtrail:0000325:95eb3506-21f3-4ccb-abf0-54ecb8e54c23", "row_index": 325, "timestamp": "2017-03-01T07:30:35Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95eb3506-21f3-4ccb-abf0-54ecb8e54c23", "eventTime": "2017-03-01T07:30:35Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f941e87-d46e-4239-8523-f2c5d256fe09", "record_id": "flaws_cloudtrail:0000326:1f941e87-d46e-4239-8523-f2c5d256fe09", "row_index": 326, "timestamp": "2017-03-01T07:30:35Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f941e87-d46e-4239-8523-f2c5d256fe09", "eventTime": "2017-03-01T07:30:35Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "IjCP06V0WY8QLSt/Hnn+QQzdGaYMkM+fcKgqVzakS/ic5wjjK7zrQ6ornnyMlWah", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf64695e-f810-40d2-a1ae-3eb7d86e6c56", "record_id": "flaws_cloudtrail:0000327:cf64695e-f810-40d2-a1ae-3eb7d86e6c56", "row_index": 327, "timestamp": "2017-03-01T07:30:36Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf64695e-f810-40d2-a1ae-3eb7d86e6c56", "eventTime": "2017-03-01T07:30:36Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "D7RqP/a5FUHi9e956cTOTHoKRuANm+Mw02itU7FYOIYeJoFP3qPv/NFO6qHV+l0r", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "43013db-8784-42b3-b127-d2964f1cae8a", "record_id": "flaws_cloudtrail:0000328:43013db-8784-42b3-b127-d2964f1cae8a", "row_index": 328, "timestamp": "2017-03-01T07:30:36Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "43013db-8784-42b3-b127-d2964f1cae8a", "eventTime": "2017-03-01T07:30:36Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "4bqcJ4nkY/l/dTbGQJc2ddGFIiDtgMzaTVyF3gvhz23uY3Pj0wNIVy23Dw9VWNZV", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e1d90f0-82b6-4c79-a0ab-1bda14ccdeed", "record_id": "flaws_cloudtrail:0000329:9e1d90f0-82b6-4c79-a0ab-1bda14ccdeed", "row_index": 329, "timestamp": "2017-03-01T07:30:36Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e1d90f0-82b6-4c79-a0ab-1bda14ccdeed", "eventTime": "2017-03-01T07:30:36Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "f6n5a47f3ojzOEBfyqj6vf3qXGrg2ti4Bs+IN1rdgoZDFuXtbq6ufuogpRMnKWyi", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e566e067-bd6a-4066-9b95-0e0ea76d2c6a", "record_id": "flaws_cloudtrail:0000330:e566e067-bd6a-4066-9b95-0e0ea76d2c6a", "row_index": 330, "timestamp": "2017-03-01T07:30:37Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e566e067-bd6a-4066-9b95-0e0ea76d2c6a", "eventTime": "2017-03-01T07:30:37Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "z5ypUsrZz3peBuL18SsL4cXnXu4jFpot1QtcB35/+B/LZJR2qMRSQMGa5qNvvQUs", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f148ac9e-b0f7-488c-b7d7-164b19840eb", "record_id": "flaws_cloudtrail:0000331:f148ac9e-b0f7-488c-b7d7-164b19840eb", "row_index": 331, "timestamp": "2017-03-01T07:30:37Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f148ac9e-b0f7-488c-b7d7-164b19840eb", "eventTime": "2017-03-01T07:30:37Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "es3Q0uevRs82umfv7YgiDG7uqcG4scfx7MpWaLbdnaSiajZg9hb8i/idTp8K17vs", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8df036f-25dc-4b16-a7e4-5dda1c0c7e3f", "record_id": "flaws_cloudtrail:0000332:e8df036f-25dc-4b16-a7e4-5dda1c0c7e3f", "row_index": 332, "timestamp": "2017-03-01T07:30:38Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8df036f-25dc-4b16-a7e4-5dda1c0c7e3f", "eventTime": "2017-03-01T07:30:38Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "WhLO3RowSDTDXyNy5RaW4aboNU8pWT4288pPrJ/qh7i2SZJ/EdsJVidjDhw/7Fn/", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f542caa-a458-4025-9530-2f25f81e53e0", "record_id": "flaws_cloudtrail:0000333:6f542caa-a458-4025-9530-2f25f81e53e0", "row_index": 333, "timestamp": "2017-03-01T07:30:38Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f542caa-a458-4025-9530-2f25f81e53e0", "eventTime": "2017-03-01T07:30:38Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "plsHP5jqeiKW/WuJul3pxGnzmGz/6bx80lHOpQT4KRUWeHfuVmOjZCNE1AnYWfYv", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "424bd955-2677-4730-9f9b-ebcc50949bb1", "record_id": "flaws_cloudtrail:0000334:424bd955-2677-4730-9f9b-ebcc50949bb1", "row_index": 334, "timestamp": "2017-03-01T07:30:38Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "424bd955-2677-4730-9f9b-ebcc50949bb1", "eventTime": "2017-03-01T07:30:38Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "IKfsdUXlu6NRZ9jQwLFqkaiyhrolZ8M+zxuLgCZDcmux7SgLlRP8dBCxjp4pNV6M", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e77df9d9-360f-4755-aa41-399e44427", "record_id": "flaws_cloudtrail:0000335:e77df9d9-360f-4755-aa41-399e44427", "row_index": 335, "timestamp": "2017-03-01T07:30:39Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e77df9d9-360f-4755-aa41-399e44427", "eventTime": "2017-03-01T07:30:39Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "vht6m1G/zvfzIr9bSmfrLtc7VUjAvyoeCOAQ/HFSzSJST9pp2d1OmSl3eM/lrGXZ", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ee2e46-6b5c-4d51-858b-4c45ff698717", "record_id": "flaws_cloudtrail:0000336:49ee2e46-6b5c-4d51-858b-4c45ff698717", "row_index": 336, "timestamp": "2017-03-01T07:30:39Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ee2e46-6b5c-4d51-858b-4c45ff698717", "eventTime": "2017-03-01T07:30:39Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "R/OgiDX0mmRIDXLk+0a593gNMXUJbrtGjLG9kh4wWaze2jZJoDhZ8y4TMoz9GKt7", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5503f608-d9ee-437c-b4ec-73e0929f27e1", "record_id": "flaws_cloudtrail:0000337:5503f608-d9ee-437c-b4ec-73e0929f27e1", "row_index": 337, "timestamp": "2017-03-01T07:30:40Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5503f608-d9ee-437c-b4ec-73e0929f27e1", "eventTime": "2017-03-01T07:30:40Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "EC2GCiwobfiB8h7R7b/ho9GjVM2EbyLLU7AwQhfpdzgvNSeNhcSBG/MIuvL7YiR1", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f03d1b77-e953-48ed-8f48-5c46c36045f", "record_id": "flaws_cloudtrail:0000338:f03d1b77-e953-48ed-8f48-5c46c36045f", "row_index": 338, "timestamp": "2017-03-01T07:30:40Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f03d1b77-e953-48ed-8f48-5c46c36045f", "eventTime": "2017-03-01T07:30:40Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "+92pZ15CnN8axrWY4CW5qP0j90yM8lAt92CTYqSEUvgoSTeNK/mFoaIKU2zukkqe", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a71016-ec10-4cab-b5e1-2f1a9d5dc120", "record_id": "flaws_cloudtrail:0000339:3a71016-ec10-4cab-b5e1-2f1a9d5dc120", "row_index": 339, "timestamp": "2017-03-01T07:30:41Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a71016-ec10-4cab-b5e1-2f1a9d5dc120", "eventTime": "2017-03-01T07:30:41Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "9GeBgJ53+A/xdEbUaEi12FTR0OvP17S6kD2vSP2QzQskPAv/ybzhXMEPRRqdxZJK", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99f90f77-ea8c-46c6-ab6f-3c6ec22964e8", "record_id": "flaws_cloudtrail:0000340:99f90f77-ea8c-46c6-ab6f-3c6ec22964e8", "row_index": 340, "timestamp": "2017-03-01T07:30:41Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99f90f77-ea8c-46c6-ab6f-3c6ec22964e8", "eventTime": "2017-03-01T07:30:41Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "jhNCD/pfqA3ta8/ipQWUT31n0+fcsH6jmUlHzjr16QaVmr/CTgiS7gnIBIyL0DEQ", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3df9ba89-d36f-481a-86d6-5bd4ac5e4e1b", "record_id": "flaws_cloudtrail:0000341:3df9ba89-d36f-481a-86d6-5bd4ac5e4e1b", "row_index": 341, "timestamp": "2017-03-01T07:30:41Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3df9ba89-d36f-481a-86d6-5bd4ac5e4e1b", "eventTime": "2017-03-01T07:30:41Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "aH/gblFFzFWIQ/gGBQEpR6hm27XKgiUq0y85bifLO86xRiujBWXJF43jGFdnYhHM", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b738fe-71e8-41c7-a5df-63579bb88d2b", "record_id": "flaws_cloudtrail:0000342:c4b738fe-71e8-41c7-a5df-63579bb88d2b", "row_index": 342, "timestamp": "2017-03-01T07:30:42Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b738fe-71e8-41c7-a5df-63579bb88d2b", "eventTime": "2017-03-01T07:30:42Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "WOoQVDgxsgJOjIMh1NoeFFNWiCYrQ4jI1U1mgaChSjc2tP8rp1uozIvRg1q6wozA", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85443c4-fa84-4983-b887-284a6e29cda2", "record_id": "flaws_cloudtrail:0000343:85443c4-fa84-4983-b887-284a6e29cda2", "row_index": 343, "timestamp": "2017-03-01T07:30:42Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85443c4-fa84-4983-b887-284a6e29cda2", "eventTime": "2017-03-01T07:30:42Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "icOuLGAEWgjSPXeI378p9lz7d/7sYixAn5JyF+NJdwEahtbXdKo2hHclV3lbV2eP", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29a98a98-c4a4-4bca-a76c-e35ad3e516bc", "record_id": "flaws_cloudtrail:0000344:29a98a98-c4a4-4bca-a76c-e35ad3e516bc", "row_index": 344, "timestamp": "2017-03-01T07:30:43Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29a98a98-c4a4-4bca-a76c-e35ad3e516bc", "eventTime": "2017-03-01T07:30:43Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "rGI1s1BP4oKB4J1HoLRQ7guU9hmgYrjzMTH1ZRSczaZ30N3xuEHMSFxplVTnzeoH", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "133a7397-6ea1-4cb9-9d80-b8aed03a6510", "record_id": "flaws_cloudtrail:0000345:133a7397-6ea1-4cb9-9d80-b8aed03a6510", "row_index": 345, "timestamp": "2017-03-01T07:30:43Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "133a7397-6ea1-4cb9-9d80-b8aed03a6510", "eventTime": "2017-03-01T07:30:43Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "HpOIAVYv8MLV5De6kmOketM/a5ivsTGZ85IuS5Jh+dZSFT1jixowhc0RRSpqeiR0", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09766-5a1e-4968-91b2-60a5a1a2ce58", "record_id": "flaws_cloudtrail:0000346:09766-5a1e-4968-91b2-60a5a1a2ce58", "row_index": 346, "timestamp": "2017-03-01T07:30:44Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09766-5a1e-4968-91b2-60a5a1a2ce58", "eventTime": "2017-03-01T07:30:44Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "K3iwsx/981kAWXmN9RWBhLbhEfFW773WPQf07svoQhpPkbvb2PLfjimVxTGzzkLM", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8548b23f-a06f-40ba-b7f6-af6729feec54", "record_id": "flaws_cloudtrail:0000347:8548b23f-a06f-40ba-b7f6-af6729feec54", "row_index": 347, "timestamp": "2017-03-01T07:30:44Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8548b23f-a06f-40ba-b7f6-af6729feec54", "eventTime": "2017-03-01T07:30:44Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "oBMSbDP6EuF2fNw/cAAEDYMq8WnU3TMhbWf4wkhHz/xa7w0nXQNuV4Fpoix+J8l5", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0083a629-6ac6-4d79-b5b7-983ab0a015d3", "record_id": "flaws_cloudtrail:0000348:0083a629-6ac6-4d79-b5b7-983ab0a015d3", "row_index": 348, "timestamp": "2017-03-01T07:30:45Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0083a629-6ac6-4d79-b5b7-983ab0a015d3", "eventTime": "2017-03-01T07:30:45Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "iT2Z4pVqa/oTEBId27Qe8Bxe1IROolo5+D/EA+XPZWAmeyEtUYj+8Qlai62+IlXJ", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e0a0a79-61ff-4bab-80e2-c68b35fa2876", "record_id": "flaws_cloudtrail:0000349:9e0a0a79-61ff-4bab-80e2-c68b35fa2876", "row_index": 349, "timestamp": "2017-03-01T07:30:45Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e0a0a79-61ff-4bab-80e2-c68b35fa2876", "eventTime": "2017-03-01T07:30:45Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "aGSkAIGrU7WA83NHGXCMbGNxrF4sQVjl8mIOBvAUm0iyjl5QLRx2PNIGce+LA4Y+", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4740adc6-c2ac-4eae-80e9-f2e1b59888", "record_id": "flaws_cloudtrail:0000350:4740adc6-c2ac-4eae-80e9-f2e1b59888", "row_index": 350, "timestamp": "2017-03-01T07:30:45Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4740adc6-c2ac-4eae-80e9-f2e1b59888", "eventTime": "2017-03-01T07:30:45Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "pov9bxiOD8qUtg7AF3LiCPecsByUf1Y7koMsGhtFcORTtbHTAxLQfihG39BxV9bk", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e552ec96-c088-4a41-a5e6-3768e2f8ef2e", "record_id": "flaws_cloudtrail:0000351:e552ec96-c088-4a41-a5e6-3768e2f8ef2e", "row_index": 351, "timestamp": "2017-03-01T07:30:46Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e552ec96-c088-4a41-a5e6-3768e2f8ef2e", "eventTime": "2017-03-01T07:30:46Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "K92w3nFyr+MtEr0oGpPX/BsQQvWMyR2Vut18fBBoRy7XoeCMs23gLJzodAt13KqG", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cbf683f-9134-4523-909c-9a964007e8d0", "record_id": "flaws_cloudtrail:0000352:5cbf683f-9134-4523-909c-9a964007e8d0", "row_index": 352, "timestamp": "2017-03-01T07:30:46Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cbf683f-9134-4523-909c-9a964007e8d0", "eventTime": "2017-03-01T07:30:46Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "DaWn51/ypvqMTd4GGK2itGiMAZqFYrx9lS0Yt49ODaKaKJiw1x6w/UGtwX42FZuN", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f47cf1d-fbb9-47fb-9e40-015cd3969a98", "record_id": "flaws_cloudtrail:0000353:7f47cf1d-fbb9-47fb-9e40-015cd3969a98", "row_index": 353, "timestamp": "2017-03-01T07:30:47Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f47cf1d-fbb9-47fb-9e40-015cd3969a98", "eventTime": "2017-03-01T07:30:47Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "L55jKGUt3m3XHh1dAJnKkKiVuOG3WTHafL16IO+BN9pJYPX9+Xx9q01mmHm5Ay4E", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c665eb70-77c7-4e40-a17c-e14f64128f5c", "record_id": "flaws_cloudtrail:0000354:c665eb70-77c7-4e40-a17c-e14f64128f5c", "row_index": 354, "timestamp": "2017-03-01T07:30:47Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c665eb70-77c7-4e40-a17c-e14f64128f5c", "eventTime": "2017-03-01T07:30:47Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "g9fyI0YLrXR/wT4GUilF33yGeq94Mfmj3mI9QZ97gU53Ewso7TmMsHdenzywJyfL", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1392a2ce-4272-40d2-9295-4bdc279df749", "record_id": "flaws_cloudtrail:0000355:1392a2ce-4272-40d2-9295-4bdc279df749", "row_index": 355, "timestamp": "2017-03-01T07:30:47Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1392a2ce-4272-40d2-9295-4bdc279df749", "eventTime": "2017-03-01T07:30:47Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "bOfTo3KZ3oSy+TlJ+Oip8c8DoQAVYQ7a6NvDaTg8hmVIR26cFBYuGyuIZULvT+uq", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b68dbf1-6639-4d63-bece-fc694821196d", "record_id": "flaws_cloudtrail:0000356:0b68dbf1-6639-4d63-bece-fc694821196d", "row_index": 356, "timestamp": "2017-03-01T07:30:48Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b68dbf1-6639-4d63-bece-fc694821196d", "eventTime": "2017-03-01T07:30:48Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "0h0jh+J5uIQe1yyaEvFGWxYrdqja/T1g5P/wSbSFNX8grn4dVWQA+1u9h3FNxZod", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0eabad5-2e60-47d2-9279-485845b4807e", "record_id": "flaws_cloudtrail:0000357:a0eabad5-2e60-47d2-9279-485845b4807e", "row_index": 357, "timestamp": "2017-03-01T07:30:48Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0eabad5-2e60-47d2-9279-485845b4807e", "eventTime": "2017-03-01T07:30:48Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "9LyeBMJMFgWGTNWYldXdRPgLVAPN5kXKM/r88LA3nNKEeQlMciIB0Kd510ZYjmlb", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dba83b7d-b4d6-4a43-b269-b9a51d53fe31", "record_id": "flaws_cloudtrail:0000358:dba83b7d-b4d6-4a43-b269-b9a51d53fe31", "row_index": 358, "timestamp": "2017-03-01T07:30:49Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dba83b7d-b4d6-4a43-b269-b9a51d53fe31", "eventTime": "2017-03-01T07:30:49Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "cY8HKTEgjxvPo0gowKHRKHPNxbK+glC6xL/nh26nR7l5HZ5yr/jtzUQ1zgrvH4c5", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "379147d49-56bb-459e-b530-754ca8f983bc", "record_id": "flaws_cloudtrail:0000359:379147d49-56bb-459e-b530-754ca8f983bc", "row_index": 359, "timestamp": "2017-03-01T07:30:49Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "379147d49-56bb-459e-b530-754ca8f983bc", "eventTime": "2017-03-01T07:30:49Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "1PIRwMufhQ+L3AYdCk5kZFIgX78akVVBMs/q5lMh8T9YMNDEcjSqFWCMtaKwWBq2", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b849fd68-e62f-45c5-803d-8b127406c81a", "record_id": "flaws_cloudtrail:0000360:b849fd68-e62f-45c5-803d-8b127406c81a", "row_index": 360, "timestamp": "2017-03-01T07:30:50Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b849fd68-e62f-45c5-803d-8b127406c81a", "eventTime": "2017-03-01T07:30:50Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "8nf2y9k+0dQwgYLW+WL1k/66AwfdjRwH45slxfJ8G4w+hJiO55d/vBZW+YffN6cZ", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "365ab00d-33ae-4d1a-843b-0a460bd1b8f4", "record_id": "flaws_cloudtrail:0000361:365ab00d-33ae-4d1a-843b-0a460bd1b8f4", "row_index": 361, "timestamp": "2017-03-01T07:30:50Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "365ab00d-33ae-4d1a-843b-0a460bd1b8f4", "eventTime": "2017-03-01T07:30:50Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "L/gwYX+Inh7Rst1tz/wiAdKxd5WxcegoEOF6MWwp7CRj0Oyfny2Vls3zAlAJYS3p", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67487bd6-bdf0-4791-992d-0a22154baed0", "record_id": "flaws_cloudtrail:0000362:67487bd6-bdf0-4791-992d-0a22154baed0", "row_index": 362, "timestamp": "2017-03-01T07:30:50Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67487bd6-bdf0-4791-992d-0a22154baed0", "eventTime": "2017-03-01T07:30:50Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "hx6Pdv0Gx65VkdRTqTIpDFUtJ4yE9Xit3ZM1NX/TjVn03/rt+MqUldbhN8e2lG1m", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8399c6ba-9365-4261-af4f-c95c61656f4e", "record_id": "flaws_cloudtrail:0000363:8399c6ba-9365-4261-af4f-c95c61656f4e", "row_index": 363, "timestamp": "2017-03-01T07:30:51Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8399c6ba-9365-4261-af4f-c95c61656f4e", "eventTime": "2017-03-01T07:30:51Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "NBglQc50WC0xhF8jRrHqqKAG8SYU4tm4curGP1h/IjSo2dMVyTDjJJsmYCZRvaya", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27c098a5-ac9f-4449-ad2e-4a14acdc63d6", "record_id": "flaws_cloudtrail:0000364:27c098a5-ac9f-4449-ad2e-4a14acdc63d6", "row_index": 364, "timestamp": "2017-03-01T07:30:51Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27c098a5-ac9f-4449-ad2e-4a14acdc63d6", "eventTime": "2017-03-01T07:30:51Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "RawvE0vmJ1diOCJx3RoTZf/ddRdc7pFaiBC1e/3+x0B8uBc1MjryqTHh8+eVTtU9", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5655b6fa-59de-4c09-b192-86b8a1494c47", "record_id": "flaws_cloudtrail:0000365:5655b6fa-59de-4c09-b192-86b8a1494c47", "row_index": 365, "timestamp": "2017-03-01T07:30:52Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5655b6fa-59de-4c09-b192-86b8a1494c47", "eventTime": "2017-03-01T07:30:52Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "84G3nPbySNUzRd4bOkM/Rv2XemUCA67zSfoBgy8yV8sfHP5kR0wx/N3Yz6fxn+bH", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "081ef036-19aa-4f97-a87b-fdf9b8fc9f58", "record_id": "flaws_cloudtrail:0000366:081ef036-19aa-4f97-a87b-fdf9b8fc9f58", "row_index": 366, "timestamp": "2017-03-01T07:30:52Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "081ef036-19aa-4f97-a87b-fdf9b8fc9f58", "eventTime": "2017-03-01T07:30:52Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "EDjqcT30LrUpAgsHJQowdZqrFsAPAL+u4R8+I4XgyD1u4zgEjFoHQqtniAPFPb3/", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfe2e743-ca6c-4525-8aa3-2c43d067be8f", "record_id": "flaws_cloudtrail:0000367:bfe2e743-ca6c-4525-8aa3-2c43d067be8f", "row_index": 367, "timestamp": "2017-03-01T07:30:52Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfe2e743-ca6c-4525-8aa3-2c43d067be8f", "eventTime": "2017-03-01T07:30:52Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "iEpk/NJRsZxo4jrRxM1HRpJTex8gQrpaIGLja3gNnFliWTlKGJZ35/JtmC9F5D4d", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab65a6e-c8c8-4d78-8672-9748c71840af", "record_id": "flaws_cloudtrail:0000368:4ab65a6e-c8c8-4d78-8672-9748c71840af", "row_index": 368, "timestamp": "2017-03-01T07:30:53Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab65a6e-c8c8-4d78-8672-9748c71840af", "eventTime": "2017-03-01T07:30:53Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "Zk0x2IiZ+gVjWDDF7de2Qt9Dq2RSleYxFvBt3UawfG7sIqyZMA4pQ1QL1VlJISLE", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18c42ebd-5f73-40fd-834f-b9018677eea7", "record_id": "flaws_cloudtrail:0000369:18c42ebd-5f73-40fd-834f-b9018677eea7", "row_index": 369, "timestamp": "2017-03-01T07:30:54Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18c42ebd-5f73-40fd-834f-b9018677eea7", "eventTime": "2017-03-01T07:30:54Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "7MQG8EaXpiJVGtI/5AgvDA/e2iVTN36AgCM/LG0/1NKiVfWxAPQh5/unX7pYfbI0", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb9cb777-a6e7-4e8d-9d13-fdcb2fdad970", "record_id": "flaws_cloudtrail:0000370:fb9cb777-a6e7-4e8d-9d13-fdcb2fdad970", "row_index": 370, "timestamp": "2017-03-01T07:30:55Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb9cb777-a6e7-4e8d-9d13-fdcb2fdad970", "eventTime": "2017-03-01T07:30:55Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "WPcGHvGhthBmPdvbQGX/Fx5M7rp5LwkzVwAqDCN9i0ARt81GWJtv4XpcOws8RVpqurLjFRNbyhZVp+VU7tR4PA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29d7a0c1-157e-4a9f-a054-de59d29bf9ed", "record_id": "flaws_cloudtrail:0000371:29d7a0c1-157e-4a9f-a054-de59d29bf9ed", "row_index": 371, "timestamp": "2017-03-01T07:30:55Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29d7a0c1-157e-4a9f-a054-de59d29bf9ed", "eventTime": "2017-03-01T07:30:55Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "hWRrvMwPMAon7oQmf1cHzFvYddXOqLTCqLadV4vgD2Onf3Xfjodt/v1okdStfuGLB7LrkYY3+1ScvVhCrljOpg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c3af182-3598-4b9d-93c2-98af56e237a7", "record_id": "flaws_cloudtrail:0000372:1c3af182-3598-4b9d-93c2-98af56e237a7", "row_index": 372, "timestamp": "2017-03-01T07:30:56Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c3af182-3598-4b9d-93c2-98af56e237a7", "eventTime": "2017-03-01T07:30:56Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "mjvVbvQZLDjH8rVBzquQI7WAnOrdbzBi9BEwixaGIH99CS+I1degUfUWlyeLYUT5enAgwGpn8c5JTR8fy4dwXg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "492a3658-69a8-42c5-9964-4c0e0f78615", "record_id": "flaws_cloudtrail:0000373:492a3658-69a8-42c5-9964-4c0e0f78615", "row_index": 373, "timestamp": "2017-03-01T07:30:56Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "492a3658-69a8-42c5-9964-4c0e0f78615", "eventTime": "2017-03-01T07:30:56Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "0QajsqRng20NFmZ/665AGMSAN9MXHczIzwf7gbSsVuGY7mVaNo7jkXAxbW7YgaV3L9kJDRHT922hsD7GyioIWA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ab0603e-ac3f-4d46-ba34-bf2427bb7d09", "record_id": "flaws_cloudtrail:0000374:9ab0603e-ac3f-4d46-ba34-bf2427bb7d09", "row_index": 374, "timestamp": "2017-03-01T07:30:57Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ab0603e-ac3f-4d46-ba34-bf2427bb7d09", "eventTime": "2017-03-01T07:30:57Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "7QzSvKCO5Fe1kwkZR+v6Axo+s+SHsNH/NmgLT2zsDl9x/FSDxxv7omFhoJgZ5BVkS4DkIkjyAPqkr7XdzQck6Q==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "002566fad-773b-4e28-90e1-9de474690dd92", "record_id": "flaws_cloudtrail:0000375:002566fad-773b-4e28-90e1-9de474690dd92", "row_index": 375, "timestamp": "2017-03-01T07:30:57Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "002566fad-773b-4e28-90e1-9de474690dd92", "eventTime": "2017-03-01T07:30:57Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "o1Zfif+Z39StbOD/tdXePU/x3w1s00MPlLFJ5O5TtRqIQgELyUIfdOnsHGwsYi2rUXiIH6Qk+W5oST5b3A5JWw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "359f7b0b-cc1d-49be-b7a8-c740705be", "record_id": "flaws_cloudtrail:0000376:359f7b0b-cc1d-49be-b7a8-c740705be", "row_index": 376, "timestamp": "2017-03-01T07:30:58Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "359f7b0b-cc1d-49be-b7a8-c740705be", "eventTime": "2017-03-01T07:30:58Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "7YQzZcHUycefgKbL8e8w4URxSW1+9igGsPddMxO7mMZe6Y6PH6jHeZ8fVUoLLNUWIvsXcfl97SQ8pzpKGUhuJQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9c182984-c145-4ea1-9028-d1e57f68fe19", "record_id": "flaws_cloudtrail:0000377:d9c182984-c145-4ea1-9028-d1e57f68fe19", "row_index": 377, "timestamp": "2017-03-01T07:30:58Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9c182984-c145-4ea1-9028-d1e57f68fe19", "eventTime": "2017-03-01T07:30:58Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "QGHYPbj5aiET4hkaZbLGnfg1R+lEUQ4NerMWHNgB3zkSRDdILJFskThiMfurKCeRB0Cf0KkdN8EP8knidbn1GA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "95bac804-2619-4e73-a220-857ed450b4cd", "record_id": "flaws_cloudtrail:0000378:95bac804-2619-4e73-a220-857ed450b4cd", "row_index": 378, "timestamp": "2017-03-01T07:30:59Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "95bac804-2619-4e73-a220-857ed450b4cd", "eventTime": "2017-03-01T07:30:59Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "chJ5uVC2mI70yKrnbwj3s4hzUlkNEuXNaV7DF5AfIs4oCJ9dyC5zdIs1zDW6ythQUXiIH6Qk+W5oST5b3A5JWw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd1481fa-5092-4bf2-bf39-c9c5e17088f6", "record_id": "flaws_cloudtrail:0000379:dd1481fa-5092-4bf2-bf39-c9c5e17088f6", "row_index": 379, "timestamp": "2017-03-01T07:30:59Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd1481fa-5092-4bf2-bf39-c9c5e17088f6", "eventTime": "2017-03-01T07:30:59Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "oBeY2DbBYpejmZb3uxOnQKASa3ee+U8O6eRGEm9hbJcH/KUV2T2LBF/LTHNPXBOb11vERozrtN0jDzj1O62SCg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3c7ba3d-19d4-4934-8454-ca96767e4fe", "record_id": "flaws_cloudtrail:0000380:d3c7ba3d-19d4-4934-8454-ca96767e4fe", "row_index": 380, "timestamp": "2017-03-01T07:31:00Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3c7ba3d-19d4-4934-8454-ca96767e4fe", "eventTime": "2017-03-01T07:31:00Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "Mob34HKQMcOrK4mCn+JA/MMLd9cJoIcB+xu+w9iJE6rPe21BGE0giwuEWZ5Omt8u/0DRFsYzjmSTyP2mRJ6oMw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d49179e-2b38-4f16-b33a-0360f1727184", "record_id": "flaws_cloudtrail:0000381:5d49179e-2b38-4f16-b33a-0360f1727184", "row_index": 381, "timestamp": "2017-03-01T07:31:00Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d49179e-2b38-4f16-b33a-0360f1727184", "eventTime": "2017-03-01T07:31:00Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "4iQRAeLOTmIEEiWUcS29GZMhUwimrCaP61Rt6YSvzzMdl6tnaYW2rRN+ropIR/SOpsNR2KcB5EBDtzTOG3CGJg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0cecbe8-9875-49d4-9fa9-a9faa12b126b", "record_id": "flaws_cloudtrail:0000382:f0cecbe8-9875-49d4-9fa9-a9faa12b126b", "row_index": 382, "timestamp": "2017-03-01T07:31:01Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0cecbe8-9875-49d4-9fa9-a9faa12b126b", "eventTime": "2017-03-01T07:31:01Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "KJ8CThexnJVkktN1mrFlMXfAdSCHvuM75V/WZFMY06odl6tnaYW2rRN+ropIR/SORUttHYFMSDqAs5ImEOkFLQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7e1c91a-1c1f-46bc-aa5b-48da4b1556b4", "record_id": "flaws_cloudtrail:0000383:c7e1c91a-1c1f-46bc-aa5b-48da4b1556b4", "row_index": 383, "timestamp": "2017-03-01T07:31:01Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7e1c91a-1c1f-46bc-aa5b-48da4b1556b4", "eventTime": "2017-03-01T07:31:01Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "xUEXkawp2zJnehKLdYQErojR6TLhQEsrXnObrPpS/yB2R834ylys62Zi+nkVOTiTgKNFVkZSH3Fw94WypbUWQw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5e2b7fb-00d3-4d62-9e06-a2e8c930bd72", "record_id": "flaws_cloudtrail:0000384:a5e2b7fb-00d3-4d62-9e06-a2e8c930bd72", "row_index": 384, "timestamp": "2017-03-01T07:31:02Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5e2b7fb-00d3-4d62-9e06-a2e8c930bd72", "eventTime": "2017-03-01T07:31:02Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "5nA56M5UhxNf7l8Fp/m8Kgn9/4UFRAoHHGpnTI8Nm7R2R834ylys62Zi+nkVOTiTW8vBJw7+THhNPkArB3EGUQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aee4d94-627c-40c4-a0bb-7a96c5513f85", "record_id": "flaws_cloudtrail:0000385:6aee4d94-627c-40c4-a0bb-7a96c5513f85", "row_index": 385, "timestamp": "2017-03-01T07:31:02Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aee4d94-627c-40c4-a0bb-7a96c5513f85", "eventTime": "2017-03-01T07:31:02Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "/E1wwZ+SpCS35ipuQe8e3uGda3ej8n0jr8m6nlBosbyvuGgJLVP4uIz5cHLaIqGiLU9+rZPSFC4zXaGIUeT4/w==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fc54f88-f9ee-4d6e-bc19-3007b1798bad", "record_id": "flaws_cloudtrail:0000386:8fc54f88-f9ee-4d6e-bc19-3007b1798bad", "row_index": 386, "timestamp": "2017-03-01T07:31:03Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fc54f88-f9ee-4d6e-bc19-3007b1798bad", "eventTime": "2017-03-01T07:31:03Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "ejsAsh6TEVjKxguuhJFlHD3ZHWWgoCNgPSpSY2ouggivuGgJLVP4uIz5cHLaIqGiB3oYSS04TgUuSl43GTYzeA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fb5bd5f-8e84-4cdb-bdb1-ae189887", "record_id": "flaws_cloudtrail:0000387:8fb5bd5f-8e84-4cdb-bdb1-ae189887", "row_index": 387, "timestamp": "2017-03-01T07:31:03Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fb5bd5f-8e84-4cdb-bdb1-ae189887", "eventTime": "2017-03-01T07:31:03Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "S+aSutJ0jkEy+XJJnYfaq9yppCCzK/+KcbnhwvSSwEmrQhU1Jab57m0l8n+r8vD7GGRf3k3i3Va2Y0Bq7aZNIg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02889-cf3b-421f-8ef2-7b987ee56e58", "record_id": "flaws_cloudtrail:0000388:02889-cf3b-421f-8ef2-7b987ee56e58", "row_index": 388, "timestamp": "2017-03-01T07:31:04Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02889-cf3b-421f-8ef2-7b987ee56e58", "eventTime": "2017-03-01T07:31:04Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "JxsG5EHFsOVZ5WiWsUufbu7it5MnfD2NvffmRZMcxD+rQhU1Jab57m0l8n+r8vD7kF1o6wGW2yjLDVTRwTtRUQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70b3212b-2b81-4acf-b63f-4938f261aa3e", "record_id": "flaws_cloudtrail:0000389:70b3212b-2b81-4acf-b63f-4938f261aa3e", "row_index": 389, "timestamp": "2017-03-01T07:31:04Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70b3212b-2b81-4acf-b63f-4938f261aa3e", "eventTime": "2017-03-01T07:31:04Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "JVZg+4ycBr8r0TVg9Vr7Be+/XyYqtu/IlXlluJGPDknhDJvMkb+3OhFXzqeynwXvOtG/q+w4b51D5EKZpZX2tw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ead283c0-2266-4be9-93e6-0ec2ca92732e", "record_id": "flaws_cloudtrail:0000390:ead283c0-2266-4be9-93e6-0ec2ca92732e", "row_index": 390, "timestamp": "2017-03-01T07:31:05Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ead283c0-2266-4be9-93e6-0ec2ca92732e", "eventTime": "2017-03-01T07:31:05Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "yv36XMmsutsuhYL1GrQitAGewBBGXJPqO/EV5N8U2uFLhjKvCeYGb4LvzGVuJcsNaJbfNYqLm4Lp60er87PSlQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f8df34b-8c54-491f-a18a-4e822cb3bcc9", "record_id": "flaws_cloudtrail:0000391:4f8df34b-8c54-491f-a18a-4e822cb3bcc9", "row_index": 391, "timestamp": "2017-03-01T07:31:05Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f8df34b-8c54-491f-a18a-4e822cb3bcc9", "eventTime": "2017-03-01T07:31:05Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "sJAlcv6Q1gbZuAo969zCY4eSVi9gsZ3XZ477lWzZE41LhjKvCeYGb4LvzGVuJcsNeSFhgo2EOauC3125x0keBA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "594753e-1471-4bfc-9078-919a0ac0465a", "record_id": "flaws_cloudtrail:0000392:594753e-1471-4bfc-9078-919a0ac0465a", "row_index": 392, "timestamp": "2017-03-01T07:31:05Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "594753e-1471-4bfc-9078-919a0ac0465a", "eventTime": "2017-03-01T07:31:05Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "3Ns4G+gLyGUpyMakHk5s00hgIGHbo+yPtaGBvfHsIm/hDJvMkb+3OhFXzqeynwXvxA3vU888nnIcQTpPuv0/1w==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207f3126-eb01-4d76-a41b-d9d4a17ae4c3", "record_id": "flaws_cloudtrail:0000393:207f3126-eb01-4d76-a41b-d9d4a17ae4c3", "row_index": 393, "timestamp": "2017-03-01T07:31:06Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207f3126-eb01-4d76-a41b-d9d4a17ae4c3", "eventTime": "2017-03-01T07:31:06Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "cwHwTPg1+gqyvxCB0bllKY7iEeX8n4BjlxfM94Vo6/TIQ8onNaK3g+81AsClrxO0srYVOarzoRHBswSdngmL+Q==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55548d-6157-47c3-af39-95740f7a4d", "record_id": "flaws_cloudtrail:0000394:55548d-6157-47c3-af39-95740f7a4d", "row_index": 394, "timestamp": "2017-03-01T07:31:06Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55548d-6157-47c3-af39-95740f7a4d", "eventTime": "2017-03-01T07:31:06Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "UuwLVBqYFf2sxvgxDtHneB4cFerdr1kJHXGuxF3eiiNLhjKvCeYGb4LvzGVuJcsNpCDwKGlPnOhEEJHdssBNUA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcc0b31b-a9b8-4e32-ae9a-9a43d2a17899", "record_id": "flaws_cloudtrail:0000395:fcc0b31b-a9b8-4e32-ae9a-9a43d2a17899", "row_index": 395, "timestamp": "2017-03-01T07:31:07Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcc0b31b-a9b8-4e32-ae9a-9a43d2a17899", "eventTime": "2017-03-01T07:31:07Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "HaWVnouR5b6dIYs7cv4TZKtP6xAvU/HL9J7AboyW3Shhpt4WAZwH5rgjpKNvxDTMc3GwUHkXxxkdIVWgqyDatA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf12fd0-a32f-4ee5-861b-f75cd224c4e3", "record_id": "flaws_cloudtrail:0000396:bcf12fd0-a32f-4ee5-861b-f75cd224c4e3", "row_index": 396, "timestamp": "2017-03-01T07:31:07Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf12fd0-a32f-4ee5-861b-f75cd224c4e3", "eventTime": "2017-03-01T07:31:07Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "zlJhND0RhUJQnKpGTFvxu3Xy+b+iNXX0Qr6ClttvV9fIQ8onNaK3g+81AsClrxO09q3o5TlTbuL2WXepM1q0+Q==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1b7d786-1cdb-4768-93ea-2b4a38f2480c", "record_id": "flaws_cloudtrail:0000397:f1b7d786-1cdb-4768-93ea-2b4a38f2480c", "row_index": 397, "timestamp": "2017-03-01T07:31:08Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1b7d786-1cdb-4768-93ea-2b4a38f2480c", "eventTime": "2017-03-01T07:31:08Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "tmy+mzkwq65iQU8VlBHKLCzLRIlGxmqsGPon+ICWZEdhpt4WAZwH5rgjpKNvxDTM4x70RXls2E8UIluaLKaTVw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52141-6091-402c-8083-f8b0ed336270", "record_id": "flaws_cloudtrail:0000398:52141-6091-402c-8083-f8b0ed336270", "row_index": 398, "timestamp": "2017-03-01T07:31:08Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52141-6091-402c-8083-f8b0ed336270", "eventTime": "2017-03-01T07:31:08Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "9Tr5P8szb9xO1bQrNMlY+8sLRLVymLK4qz+CWGpCVLo58b0v6VRT+e/VgUJ1H4oUPTdxWemb+BzwsPD9fU2t5g==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d16d713-bda3-4f75-b174-9627de746354b", "record_id": "flaws_cloudtrail:0000399:6d16d713-bda3-4f75-b174-9627de746354b", "row_index": 399, "timestamp": "2017-03-01T07:31:09Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d16d713-bda3-4f75-b174-9627de746354b", "eventTime": "2017-03-01T07:31:09Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "CSD63GBbWCO39vyerIdQ6iYaZrLDqIxXO/+QcyEFPgI58b0v6VRT+e/VgUJ1H4oUs8e8nCrH6YcIqFG/Pqe6Ew==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f470e4e-47e2-4c33-a215-71194a377", "record_id": "flaws_cloudtrail:0000400:9f470e4e-47e2-4c33-a215-71194a377", "row_index": 400, "timestamp": "2017-03-01T07:31:09Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f470e4e-47e2-4c33-a215-71194a377", "eventTime": "2017-03-01T07:31:09Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "YgeA0CVCuMq0lC8q2IW16iKjnzSEYPgJB9lRHT252bSnub1LcZG+XZCUHcF57zY7PcqnmdLVyW5cnb2B3DwVZA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b8ae98-ab9a-4bb0-b8fe-f4427380a00b", "record_id": "flaws_cloudtrail:0000401:99b8ae98-ab9a-4bb0-b8fe-f4427380a00b", "row_index": 401, "timestamp": "2017-03-01T07:31:10Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b8ae98-ab9a-4bb0-b8fe-f4427380a00b", "eventTime": "2017-03-01T07:31:10Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "JTx+EK8KG5Sad/t84eBtdQpoLgzJk8sp2YSnPlJLzQinub1LcZG+XZCUHcF57zY7VGmcCgZUXw5QeEna5XJqnQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9ccf9a7-d74c-47e1-bbc5-f9f980b19670", "record_id": "flaws_cloudtrail:0000402:d9ccf9a7-d74c-47e1-bbc5-f9f980b19670", "row_index": 402, "timestamp": "2017-03-01T07:31:10Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9ccf9a7-d74c-47e1-bbc5-f9f980b19670", "eventTime": "2017-03-01T07:31:10Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "WAaM3RlLsSziDBrQbo8gnIC5aYMbFttUFUuTcuAAxR+sJoPbSeaAE4mvMG8R19Ir5sYqxKRCkuo6XTuIlTTnxw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eb8df9d-34bb-460f-b7e0-5aad534478d9", "record_id": "flaws_cloudtrail:0000403:4eb8df9d-34bb-460f-b7e0-5aad534478d9", "row_index": 403, "timestamp": "2017-03-01T07:31:11Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eb8df9d-34bb-460f-b7e0-5aad534478d9", "eventTime": "2017-03-01T07:31:11Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "uFiJ0rrhHc11rpAO1CVnLm7rKaK2ri24N17+oy2KE92sJoPbSeaAE4mvMG8R19IrtP2Twbk16JR/rWr+BljN5g==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "417b9296-6eda-4fd7-afa8-eaab8bf19b36", "record_id": "flaws_cloudtrail:0000404:417b9296-6eda-4fd7-afa8-eaab8bf19b36", "row_index": 404, "timestamp": "2017-03-01T07:31:11Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "417b9296-6eda-4fd7-afa8-eaab8bf19b36", "eventTime": "2017-03-01T07:31:11Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "9pcDysFhwZ7/7dwnybAmy7NxJ1nPp9KLRX26ho/GscCQAJz5wntMTC8bTQHxvYJlQq/iOfk9PYBkbtGDFN52kQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4679c94-6a87-425c-adaf-6d58e8eea6fc", "record_id": "flaws_cloudtrail:0000405:e4679c94-6a87-425c-adaf-6d58e8eea6fc", "row_index": 405, "timestamp": "2017-03-01T07:31:12Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4679c94-6a87-425c-adaf-6d58e8eea6fc", "eventTime": "2017-03-01T07:31:12Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "v3Av6XNAPhPvVi+EyNUtLaV7ZsToTtBddcou/BB5qkKQAJz5wntMTC8bTQHxvYJlhPOOMAlKnod7/WxPAru35A==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f392b7c-8a78-4f44-a60b-f596640fd2fd", "record_id": "flaws_cloudtrail:0000406:0f392b7c-8a78-4f44-a60b-f596640fd2fd", "row_index": 406, "timestamp": "2017-03-01T07:31:12Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f392b7c-8a78-4f44-a60b-f596640fd2fd", "eventTime": "2017-03-01T07:31:12Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "2Afh0I/rE3+Iio5NSbH18cAjKaMHEbgxTWbtkjU1mDh/rnApryI62V0ugIvQ1X6B6CoGDtuLUtD96WiF4wQSlw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d73d3eb3-4bd5-45ff-a63b-ac929cb79f8c", "record_id": "flaws_cloudtrail:0000407:d73d3eb3-4bd5-45ff-a63b-ac929cb79f8c", "row_index": 407, "timestamp": "2017-03-01T07:31:13Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d73d3eb3-4bd5-45ff-a63b-ac929cb79f8c", "eventTime": "2017-03-01T07:31:13Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "bKeGmz2qZf/T6q2AC2KPZY5MedUVH6W4jlLXbB9oFyV/rnApryI62V0ugIvQ1X6BKp9iafbvlDsG7+AimIevIA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c896fc7c-1376-47d1-81c5-131699ef3bfb8", "record_id": "flaws_cloudtrail:0000408:c896fc7c-1376-47d1-81c5-131699ef3bfb8", "row_index": 408, "timestamp": "2017-03-01T07:31:13Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c896fc7c-1376-47d1-81c5-131699ef3bfb8", "eventTime": "2017-03-01T07:31:13Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "CPh+yv9Hr6SnsTbXVc+h6LiC9evhEL0NvQ7Pro0FaU9/rnApryI62V0ugIvQ1X6BhFWmtf9zCU4OEDQUwPoiNA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "636fd34c-3100-4da1-a7b1-a3e02bbeaf50", "record_id": "flaws_cloudtrail:0000409:636fd34c-3100-4da1-a7b1-a3e02bbeaf50", "row_index": 409, "timestamp": "2017-03-01T07:31:13Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "636fd34c-3100-4da1-a7b1-a3e02bbeaf50", "eventTime": "2017-03-01T07:31:13Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "FtaNgU0+32BFO9EyKrcE26JaDJ3mjwONfmjYlRR8rMM/6drhXcGHH4Gj4FX7fS3W80IxxFy1Lu/6mqUrZohhqA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c770b246-5131-4721-a767-4ea4820bb1d9", "record_id": "flaws_cloudtrail:0000410:c770b246-5131-4721-a767-4ea4820bb1d9", "row_index": 410, "timestamp": "2017-03-01T07:31:14Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c770b246-5131-4721-a767-4ea4820bb1d9", "eventTime": "2017-03-01T07:31:14Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "pEKt31txyJYmvTa4N8s7gzpXuXJTfjPR5MUtbAx0fFc/6drhXcGHH4Gj4FX7fS3Wju617jdDrva3HhNVeQzZXQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1eea4dc-d363-47cb-90d8-dc793668ed79", "record_id": "flaws_cloudtrail:0000411:e1eea4dc-d363-47cb-90d8-dc793668ed79", "row_index": 411, "timestamp": "2017-03-01T07:31:14Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1eea4dc-d363-47cb-90d8-dc793668ed79", "eventTime": "2017-03-01T07:31:14Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "WMdyt2smNBWidqPMf906l/qx3uKLWCyUxV/o55jjr2idANyCp/QZ+4nn+fnm6dq2c3GwUHkXxxkdIVWgqyDatA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3901c129-2185-4bef-83e6-72a612768d705", "record_id": "flaws_cloudtrail:0000412:3901c129-2185-4bef-83e6-72a612768d705", "row_index": 412, "timestamp": "2017-03-01T07:31:15Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3901c129-2185-4bef-83e6-72a612768d705", "eventTime": "2017-03-01T07:31:15Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "7wimuKT3npPvuwYPU1n6UNN6Q8fDHrqP5ZF8Sy+giuKdANyCp/QZ+4nn+fnm6dq2XJARFO0Buxrl6+G37GzgNw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17dddf5e-b6e3-4b19-a935-e4d1f2b3fe60", "record_id": "flaws_cloudtrail:0000413:17dddf5e-b6e3-4b19-a935-e4d1f2b3fe60", "row_index": 413, "timestamp": "2017-03-01T07:31:16Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17dddf5e-b6e3-4b19-a935-e4d1f2b3fe60", "eventTime": "2017-03-01T07:31:16Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "qY8H2I5C5nCWoISXT+SY0pKffIQdxoEyU7tCSzAgGSkqXs4yQiRa5x9EpFrZC0Gf7rxToLkpZFofzidQdqCp/A==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efdb62f3-6813-49f9-9957-4450f105198", "record_id": "flaws_cloudtrail:0000414:efdb62f3-6813-49f9-9957-4450f105198", "row_index": 414, "timestamp": "2017-03-01T07:31:17Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efdb62f3-6813-49f9-9957-4450f105198", "eventTime": "2017-03-01T07:31:17Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "Xb9PzlJ38mgh1gL4Y8QxEpvx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC2h6bTaqTL30xPZVXOX1+TOg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eee3d98-a786-4014-9b8c-8e48f24ecb17", "record_id": "flaws_cloudtrail:0000415:8eee3d98-a786-4014-9b8c-8e48f24ecb17", "row_index": 415, "timestamp": "2017-03-01T07:31:17Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eee3d98-a786-4014-9b8c-8e48f24ecb17", "eventTime": "2017-03-01T07:31:17Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eNBTCnhPLBQjLxLXmBP5Jm9s5tx2/gmxIrcNY5DlbTEhHHsktkWe1X+rhLRKSf0ay7PoETgYczdcII/VeCuYIg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2faefccf-294c-4148-bf2d-94f5c8b0a548", "record_id": "flaws_cloudtrail:0000416:2faefccf-294c-4148-bf2d-94f5c8b0a548", "row_index": 416, "timestamp": "2017-03-01T07:31:18Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2faefccf-294c-4148-bf2d-94f5c8b0a548", "eventTime": "2017-03-01T07:31:18Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "VNKXigr6i8uWWjgEYNWUa5vx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC2TB298nASZQ2nPzimDmGpzA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96ba8562-61ea-49ae-b59d-e9e6ae8ae036", "record_id": "flaws_cloudtrail:0000417:96ba8562-61ea-49ae-b59d-e9e6ae8ae036", "row_index": 417, "timestamp": "2017-03-01T07:31:18Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96ba8562-61ea-49ae-b59d-e9e6ae8ae036", "eventTime": "2017-03-01T07:31:18Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "z23uITqqk5iN8Xp6O1MmzZvx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC2+eLST7a7RkJW1LA0kYm/pQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b712010-db3d-49a2-923e-ffd33ebca335", "record_id": "flaws_cloudtrail:0000418:b712010-db3d-49a2-923e-ffd33ebca335", "row_index": 418, "timestamp": "2017-03-01T07:31:18Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b712010-db3d-49a2-923e-ffd33ebca335", "eventTime": "2017-03-01T07:31:18Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "KoFqAL5bONAtlcPvy9FSb5vx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC2zhoGzjOKZZPYvrDz5EL04w==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b215c491-a74c-4810-a8e2-eaaca444b38a", "record_id": "flaws_cloudtrail:0000419:b215c491-a74c-4810-a8e2-eaaca444b38a", "row_index": 419, "timestamp": "2017-03-01T07:31:19Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b215c491-a74c-4810-a8e2-eaaca444b38a", "eventTime": "2017-03-01T07:31:19Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "x6jj37Ees4yCClSqCL0Hr5vx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC2Co7633DGovQ+A1cVWUNJgg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98bfbfa3-1823-4b48-860c-781b0f69c51e", "record_id": "flaws_cloudtrail:0000420:98bfbfa3-1823-4b48-860c-781b0f69c51e", "row_index": 420, "timestamp": "2017-03-01T07:31:19Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98bfbfa3-1823-4b48-860c-781b0f69c51e", "eventTime": "2017-03-01T07:31:19Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "OMm2htYDwn0pDJPH62gDN5vx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC2nM/jC4bGQhDVqsXrgl0xYg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d1007ed-5b3e-4456-a070-728585bac050", "record_id": "flaws_cloudtrail:0000421:0d1007ed-5b3e-4456-a070-728585bac050", "row_index": 421, "timestamp": "2017-03-01T07:31:20Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d1007ed-5b3e-4456-a070-728585bac050", "eventTime": "2017-03-01T07:31:20Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "5zg00gjdsGe/0a9oSCaeSJvx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC2JZHShPB1JIF4ImiN86RGrQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a055b9de-c556-42a1-817d-8ba009934266", "record_id": "flaws_cloudtrail:0000422:a055b9de-c556-42a1-817d-8ba009934266", "row_index": 422, "timestamp": "2017-03-01T07:31:20Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a055b9de-c556-42a1-817d-8ba009934266", "eventTime": "2017-03-01T07:31:20Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "e9dmBn909+hsGUpB+IP3cpvx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC2HWJvIQmwiAwP5Jtdx1CQOA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c258dded-a07c-47e7-8d83-397cb83053", "record_id": "flaws_cloudtrail:0000423:c258dded-a07c-47e7-8d83-397cb83053", "row_index": 423, "timestamp": "2017-03-01T07:31:20Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c258dded-a07c-47e7-8d83-397cb83053", "eventTime": "2017-03-01T07:31:20Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "O/JLtdOxrb+sBsE5mXrdL5vx1Mfnl7wU35ZMl2/ya5R72ziwdGlIXxIYemhN6UC23ZR/qEyoOB49SxCCKgfnhQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0222acf-0564-41c2-86da-7b59de9415fc", "record_id": "flaws_cloudtrail:0000424:e0222acf-0564-41c2-86da-7b59de9415fc", "row_index": 424, "timestamp": "2017-03-01T07:31:21Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0222acf-0564-41c2-86da-7b59de9415fc", "eventTime": "2017-03-01T07:31:21Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "+/wfAZtfInGV8SeITpFf/JUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe5qGqDEjIQXUySN7zs1i9zA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09c15a13-db8a-4cfa-8717-e782c703749e", "record_id": "flaws_cloudtrail:0000425:09c15a13-db8a-4cfa-8717-e782c703749e", "row_index": 425, "timestamp": "2017-03-01T07:31:21Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09c15a13-db8a-4cfa-8717-e782c703749e", "eventTime": "2017-03-01T07:31:21Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "0lc1LwF1DhJyh8L/KhED3ZUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfew/i8el4RObx0d+WpVW75PA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a84904-873a-4121-b93b-e8c10ca265f6", "record_id": "flaws_cloudtrail:0000426:9a84904-873a-4121-b93b-e8c10ca265f6", "row_index": 426, "timestamp": "2017-03-01T07:31:22Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a84904-873a-4121-b93b-e8c10ca265f6", "eventTime": "2017-03-01T07:31:22Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "d30pQP4X6id3zV34IMkixJUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe8Lhbi9wVCmXgy4P1Ma2fQg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f728bf25-c107-4087-b6f7-f888f49dbef7", "record_id": "flaws_cloudtrail:0000427:f728bf25-c107-4087-b6f7-f888f49dbef7", "row_index": 427, "timestamp": "2017-03-01T07:31:22Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f728bf25-c107-4087-b6f7-f888f49dbef7", "eventTime": "2017-03-01T07:31:22Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "J1ShOqofFY2FKB6YBpgyEpUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe0x3ij2YgEixQUAb3tFcyuw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0f8fb1f-f48e-4455-93a5-706ac2746f0f", "record_id": "flaws_cloudtrail:0000428:e0f8fb1f-f48e-4455-93a5-706ac2746f0f", "row_index": 428, "timestamp": "2017-03-01T07:31:23Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0f8fb1f-f48e-4455-93a5-706ac2746f0f", "eventTime": "2017-03-01T07:31:23Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "bW4/Dm3eU4jDsYfwlwxxdZUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeG2srMF1kF2wuC/1N3wtbMQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1f77e41-a095-4d72-a108-30a0c0cbdca4", "record_id": "flaws_cloudtrail:0000429:d1f77e41-a095-4d72-a108-30a0c0cbdca4", "row_index": 429, "timestamp": "2017-03-01T07:31:23Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1f77e41-a095-4d72-a108-30a0c0cbdca4", "eventTime": "2017-03-01T07:31:23Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "Hx07wG5H6NMS9fsIDqMFAJUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfepGblJLXGrui+vUJxfuB3aA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88a4fa57-d8d2-4e8c-a47d-065f302509ca", "record_id": "flaws_cloudtrail:0000430:88a4fa57-d8d2-4e8c-a47d-065f302509ca", "row_index": 430, "timestamp": "2017-03-01T07:31:24Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88a4fa57-d8d2-4e8c-a47d-065f302509ca", "eventTime": "2017-03-01T07:31:24Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eNgSJD/2jJTmgvyAT9UNeJUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeBUQnxl7Jl69Pt6bPr4to/g==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eec41b4e-443b-4afc-a7ae-31cb4f41a494", "record_id": "flaws_cloudtrail:0000431:eec41b4e-443b-4afc-a7ae-31cb4f41a494", "row_index": 431, "timestamp": "2017-03-01T07:31:24Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eec41b4e-443b-4afc-a7ae-31cb4f41a494", "eventTime": "2017-03-01T07:31:24Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "dQs/NFuwpMUfiqMWLoVS/pUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeSa2kkmCEPT9QUBb7T1eOng==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "841355df3-7cce-423c-8b3a-efbda41c62d9", "record_id": "flaws_cloudtrail:0000432:841355df3-7cce-423c-8b3a-efbda41c62d9", "row_index": 432, "timestamp": "2017-03-01T07:31:24Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "841355df3-7cce-423c-8b3a-efbda41c62d9", "eventTime": "2017-03-01T07:31:24Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "8czpItfW8icCTT868DK/L5Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe/OAWvG1c/te8ZM0Joowsow==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "870590da9-b962-435e-a681-6cd1adbda7ff", "record_id": "flaws_cloudtrail:0000433:870590da9-b962-435e-a681-6cd1adbda7ff", "row_index": 433, "timestamp": "2017-03-01T07:31:25Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "870590da9-b962-435e-a681-6cd1adbda7ff", "eventTime": "2017-03-01T07:31:25Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "HvrFYOBHz6P53gGgcMmIE5Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeUj1GCVX65zzEolA53+xHLg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb7afcba-6e42-4ddc-b813-0c92dfba0f58", "record_id": "flaws_cloudtrail:0000434:cb7afcba-6e42-4ddc-b813-0c92dfba0f58", "row_index": 434, "timestamp": "2017-03-01T07:31:25Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb7afcba-6e42-4ddc-b813-0c92dfba0f58", "eventTime": "2017-03-01T07:31:25Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "kumxStnD53TpyEZh5TN025Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe/fep9YnH6psxX6cZ8X8nqg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207008dfd-3f50-43b5-9aaa-2529b58af7a1", "record_id": "flaws_cloudtrail:0000435:207008dfd-3f50-43b5-9aaa-2529b58af7a1", "row_index": 435, "timestamp": "2017-03-01T07:31:26Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207008dfd-3f50-43b5-9aaa-2529b58af7a1", "eventTime": "2017-03-01T07:31:26Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "MGjZJxyY+itIBZFjfcwDd5Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeBFG8fWFTzAq+AAQAM9VBdw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fa1cf08-b0a8-4d74-a9df-7335935dfc15", "record_id": "flaws_cloudtrail:0000436:0fa1cf08-b0a8-4d74-a9df-7335935dfc15", "row_index": 436, "timestamp": "2017-03-01T07:31:26Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fa1cf08-b0a8-4d74-a9df-7335935dfc15", "eventTime": "2017-03-01T07:31:26Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "aWhKgdqkuWJj7t0C6m994JUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfebnNAzlKggsIBKHQEXMf4XQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9964f6a-4877-49a4-8f79-617717a8b2df", "record_id": "flaws_cloudtrail:0000437:c9964f6a-4877-49a4-8f79-617717a8b2df", "row_index": 437, "timestamp": "2017-03-01T07:31:27Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9964f6a-4877-49a4-8f79-617717a8b2df", "eventTime": "2017-03-01T07:31:27Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "bJgWKvqBUjuvzq3vOvPIW5Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfewGY0E8dJDa1g44DETXTu5g==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "affd7a5a-9111-4ae9-9989-23610d77ab", "record_id": "flaws_cloudtrail:0000438:affd7a5a-9111-4ae9-9989-23610d77ab", "row_index": 438, "timestamp": "2017-03-01T07:31:27Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "affd7a5a-9111-4ae9-9989-23610d77ab", "eventTime": "2017-03-01T07:31:27Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "noY27Ulk2B8VaqB3kKWKiJUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeXMb9pmKnOnABakEKJeMk8A==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b3aef4a-af6e-4769-83ab-ef118fc98f6f", "record_id": "flaws_cloudtrail:0000439:0b3aef4a-af6e-4769-83ab-ef118fc98f6f", "row_index": 439, "timestamp": "2017-03-01T07:31:28Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b3aef4a-af6e-4769-83ab-ef118fc98f6f", "eventTime": "2017-03-01T07:31:28Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "4e0S/mV14L5Lv+dFKgxC65Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfelY9aFYQl199fnO7vmCcU/w==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56350c3-f33c-44b8-acee-0b560cf716d8", "record_id": "flaws_cloudtrail:0000440:56350c3-f33c-44b8-acee-0b560cf716d8", "row_index": 440, "timestamp": "2017-03-01T07:31:28Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56350c3-f33c-44b8-acee-0b560cf716d8", "eventTime": "2017-03-01T07:31:28Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "ogVps1CqstypZO/v6MFEfJUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeivROY7Pxk+gnvTVFNC89NA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34c547723-7c82-4549-993b-846d0179e7c5", "record_id": "flaws_cloudtrail:0000441:34c547723-7c82-4549-993b-846d0179e7c5", "row_index": 441, "timestamp": "2017-03-01T07:31:28Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34c547723-7c82-4549-993b-846d0179e7c5", "eventTime": "2017-03-01T07:31:28Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "4o9UpqWRKNcmURDEO+r/9ZUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeflYklEhRwVFaINmya6NoQQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51b78e23-930b-4ab4-aca1-75e25a5e72be", "record_id": "flaws_cloudtrail:0000442:51b78e23-930b-4ab4-aca1-75e25a5e72be", "row_index": 442, "timestamp": "2017-03-01T07:31:29Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51b78e23-930b-4ab4-aca1-75e25a5e72be", "eventTime": "2017-03-01T07:31:29Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "3HlrH+Lq4AbARkiZCHfjbJUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeNbq+qfdPXIXVU8ribsJTzA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58aa0318-6dc3-4bb9-9ca8-02ed8ec80681", "record_id": "flaws_cloudtrail:0000443:58aa0318-6dc3-4bb9-9ca8-02ed8ec80681", "row_index": 443, "timestamp": "2017-03-01T07:31:29Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58aa0318-6dc3-4bb9-9ca8-02ed8ec80681", "eventTime": "2017-03-01T07:31:29Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "4wIEibXZcBdysC+82KiM4ZUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeTtyCOTHedIxesadfEzR/3w==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b21a3580-636b-4d3b-b0ba-5b9c114ee31e", "record_id": "flaws_cloudtrail:0000444:b21a3580-636b-4d3b-b0ba-5b9c114ee31e", "row_index": 444, "timestamp": "2017-03-01T07:31:30Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b21a3580-636b-4d3b-b0ba-5b9c114ee31e", "eventTime": "2017-03-01T07:31:30Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "1wPJhn3gFO70O9FN61f/oZUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfePURrhTnwiwF/mwjTX8KRSw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d319ef52-6bf5-4906-9759-17ae05409b80", "record_id": "flaws_cloudtrail:0000445:d319ef52-6bf5-4906-9759-17ae05409b80", "row_index": 445, "timestamp": "2017-03-01T07:31:30Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d319ef52-6bf5-4906-9759-17ae05409b80", "eventTime": "2017-03-01T07:31:30Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "M3057uN5d3fm3YzKZQa7U5Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe62mhH4khFIXyvW3TD9XY4w==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe273b19-7b70-4d3d-9bbf-e3f36741a261", "record_id": "flaws_cloudtrail:0000446:fe273b19-7b70-4d3d-9bbf-e3f36741a261", "row_index": 446, "timestamp": "2017-03-01T07:31:31Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe273b19-7b70-4d3d-9bbf-e3f36741a261", "eventTime": "2017-03-01T07:31:31Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "iv7PaC1QmrwP0yl49/OdYJUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeYhh7QPvRiHIpPm8hPVkufg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ee1bc21-4a49-475d-9c4f-84c0db3cdd19", "record_id": "flaws_cloudtrail:0000447:4ee1bc21-4a49-475d-9c4f-84c0db3cdd19", "row_index": 447, "timestamp": "2017-03-01T07:31:31Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ee1bc21-4a49-475d-9c4f-84c0db3cdd19", "eventTime": "2017-03-01T07:31:31Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "CnWtxDD7maaBLfsgonZknpUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe9Lqewt7XwpIR/XuaRkvivQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdbf8b77-6a8b-4b28-be34-e1325a4cfcc3", "record_id": "flaws_cloudtrail:0000448:cdbf8b77-6a8b-4b28-be34-e1325a4cfcc3", "row_index": 448, "timestamp": "2017-03-01T07:31:32Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdbf8b77-6a8b-4b28-be34-e1325a4cfcc3", "eventTime": "2017-03-01T07:31:32Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "rNo2cLQagxkTO+32iPyfrZUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfep4XrWdVIJvawC5T2LP8OQA==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a94255-f207-419f-a5d5-02993fde02", "record_id": "flaws_cloudtrail:0000449:d5a94255-f207-419f-a5d5-02993fde02", "row_index": 449, "timestamp": "2017-03-01T07:31:32Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a94255-f207-419f-a5d5-02993fde02", "eventTime": "2017-03-01T07:31:32Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "uj+fAhoxPZjCEZO1F1NsfZUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeCj2bW8IdUngXVkfHhTRQAQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fbbd2c0-4dd2-46f6-86ae-38c37b79b30b", "record_id": "flaws_cloudtrail:0000450:9fbbd2c0-4dd2-46f6-86ae-38c37b79b30b", "row_index": 450, "timestamp": "2017-03-01T07:31:33Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fbbd2c0-4dd2-46f6-86ae-38c37b79b30b", "eventTime": "2017-03-01T07:31:33Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "Lh06XbYr4/Kl/dTpouN70JUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfer02yVlZmd3UzCzOC6Nv96A==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83899a1b-47db-4d45-822d-8674933ff0d8", "record_id": "flaws_cloudtrail:0000451:83899a1b-47db-4d45-822d-8674933ff0d8", "row_index": 451, "timestamp": "2017-03-01T07:31:33Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83899a1b-47db-4d45-822d-8674933ff0d8", "eventTime": "2017-03-01T07:31:33Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "zxQjCcrN0bjOETalQ1M8tJUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeH/SbG2sVSXxPNfmvz1Zoew==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82e44d80-4cf3-417c-8368-d72fec88ca33", "record_id": "flaws_cloudtrail:0000452:82e44d80-4cf3-417c-8368-d72fec88ca33", "row_index": 452, "timestamp": "2017-03-01T07:31:34Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82e44d80-4cf3-417c-8368-d72fec88ca33", "eventTime": "2017-03-01T07:31:34Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "sBEWTeM7dxFFBmEFEdylv5Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkferJOcAPraKnnWBMQJUTusvQ==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c816807a-2a8c-4afb-9aa8-e46d04906cb1", "record_id": "flaws_cloudtrail:0000453:c816807a-2a8c-4afb-9aa8-e46d04906cb1", "row_index": 453, "timestamp": "2017-03-01T07:31:34Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c816807a-2a8c-4afb-9aa8-e46d04906cb1", "eventTime": "2017-03-01T07:31:34Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "Mop/pki38XrFpzmbc42zG5Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe6ZQHlANs02zMkQYr261R8w==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5bd366c-37b2-4962-9845-8432f815122d9", "record_id": "flaws_cloudtrail:0000454:a5bd366c-37b2-4962-9845-8432f815122d9", "row_index": 454, "timestamp": "2017-03-01T07:31:35Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 805, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5bd366c-37b2-4962-9845-8432f815122d9", "eventTime": "2017-03-01T07:31:35Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "gPw866C9VfZ7aMOKKkvStpUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeoAy5LlA4sNyOo6Nu6V27ow==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a809f9db-1759-4332-ab5b-be0f4a012fd5", "record_id": "flaws_cloudtrail:0000455:a809f9db-1759-4332-ab5b-be0f4a012fd5", "row_index": 455, "timestamp": "2017-03-01T07:31:35Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a809f9db-1759-4332-ab5b-be0f4a012fd5", "eventTime": "2017-03-01T07:31:35Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "12EkSuSmq73v86P1x/zmjpUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfeTwqxseiLlrCdzLdWZGMI3w==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a2bfd2e3-08aa-42dd-9a0c-8b0e7f311d4f", "record_id": "flaws_cloudtrail:0000456:a2bfd2e3-08aa-42dd-9a0c-8b0e7f311d4f", "row_index": 456, "timestamp": "2017-03-01T07:31:35Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a2bfd2e3-08aa-42dd-9a0c-8b0e7f311d4f", "eventTime": "2017-03-01T07:31:35Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "JtKVljRBzG+DTJMt3riNM5Uehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkferQjvWVFuxD5HHiclNiIxCg==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b43a4310-3cd5-4673-ae75-ca735204", "record_id": "flaws_cloudtrail:0000457:b43a4310-3cd5-4673-ae75-ca735204", "row_index": 457, "timestamp": "2017-03-01T07:31:36Z", "event_type": "DescribeReservedInstancesOfferings", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 799, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b43a4310-3cd5-4673-ae75-ca735204", "eventTime": "2017-03-01T07:31:36Z", "eventName": "DescribeReservedInstancesOfferings", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"nextToken": "eZU1xtPkONZ2TI//6DAu7ZUehfx7GNHrvsXSBD9an6qpTcW4DhXv8TwYu+MXRkfe96JZ4jbAFg6DIGOtpfaZYw==", "reservedInstancesOfferingsSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f3f415e-43ed-4782-a271-62c9103b11b2", "record_id": "flaws_cloudtrail:0000458:3f3f415e-43ed-4782-a271-62c9103b11b2", "row_index": 458, "timestamp": "2017-03-01T07:31:39Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f3f415e-43ed-4782-a271-62c9103b11b2", "eventTime": "2017-03-01T07:31:39Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7e6f60a-d1cf-4ef8-8fa4-472814f88a2", "record_id": "flaws_cloudtrail:0000459:b7e6f60a-d1cf-4ef8-8fa4-472814f88a2", "row_index": 459, "timestamp": "2017-03-01T07:31:41Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7e6f60a-d1cf-4ef8-8fa4-472814f88a2", "eventTime": "2017-03-01T07:31:41Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b1f1e14-92b2-4907-8e56-36f8ca8641be", "record_id": "flaws_cloudtrail:0000460:0b1f1e14-92b2-4907-8e56-36f8ca8641be", "row_index": 460, "timestamp": "2017-03-01T07:31:46Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b1f1e14-92b2-4907-8e56-36f8ca8641be", "eventTime": "2017-03-01T07:31:46Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d7dafc7-d1b5-469b-898d-cc0571a421a6", "record_id": "flaws_cloudtrail:0000461:8d7dafc7-d1b5-469b-898d-cc0571a421a6", "row_index": 461, "timestamp": "2017-03-01T07:31:50Z", "event_type": "DescribeSpotDatafeedSubscription", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d7dafc7-d1b5-469b-898d-cc0571a421a6", "eventTime": "2017-03-01T07:31:50Z", "eventName": "DescribeSpotDatafeedSubscription", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "errorCode": "Client.InvalidSpotDatafeed.NotFound", "errorMessage": "Spot datafeed subscription does not exist.", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9861d8a9-f29d-41a6-b918-40d4166bd006", "record_id": "flaws_cloudtrail:0000462:9861d8a9-f29d-41a6-b918-40d4166bd006", "row_index": 462, "timestamp": "2017-03-01T07:31:51Z", "event_type": "DescribeSpotInstanceRequests", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9861d8a9-f29d-41a6-b918-40d4166bd006", "eventTime": "2017-03-01T07:31:51Z", "eventName": "DescribeSpotInstanceRequests", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"spotInstanceRequestIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19e72f3e-ecf9-4e8e-b465-0eb7df707d8b", "record_id": "flaws_cloudtrail:0000463:19e72f3e-ecf9-4e8e-b465-0eb7df707d8b", "row_index": 463, "timestamp": "2017-03-01T07:31:53Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19e72f3e-ecf9-4e8e-b465-0eb7df707d8b", "eventTime": "2017-03-01T07:31:53Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d4dbbe7-35f5-4613-9fed-1b6f80cfbe93", "record_id": "flaws_cloudtrail:0000464:1d4dbbe7-35f5-4613-9fed-1b6f80cfbe93", "row_index": 464, "timestamp": "2017-03-01T07:31:55Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d4dbbe7-35f5-4613-9fed-1b6f80cfbe93", "eventTime": "2017-03-01T07:31:55Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEYzvUOPUPTYOVi9I3Htijfl05HU2j06jFrsLB0fceZFnx3BcW9GoVQn/b1clZHCTHbMU4IVxI4vUQjLTUqj29knw6eEJHKAhXWN19DOStx6Nz7GDSM+HbaSi/AOT0Th1kjONLxphCIpbyCTT2QNMI0fBJdS7U="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86dcb735-9b79-4839-91e8-a56ea01eb0cf", "record_id": "flaws_cloudtrail:0000465:86dcb735-9b79-4839-91e8-a56ea01eb0cf", "row_index": 465, "timestamp": "2017-03-01T07:31:55Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86dcb735-9b79-4839-91e8-a56ea01eb0cf", "eventTime": "2017-03-01T07:31:55Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEm/RAkM9ycCzhwt0KW6A9JhmCbH3z3WWRh2aYZamlNgtbSNJt34igxY/iGhTWVSKPPUprMFgAxZgnjGEdn/zdnoIuliFU0QZJSxgiHcNiUkuE7SgE/zWY8+t0DQiV4TlM4DWuVU7XMMXe+ZQiRy9QAG4y7Ty3klw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9c1ec59-7514-4ba7-b60a-f1f25a18c474", "record_id": "flaws_cloudtrail:0000466:d9c1ec59-7514-4ba7-b60a-f1f25a18c474", "row_index": 466, "timestamp": "2017-03-01T07:31:56Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9c1ec59-7514-4ba7-b60a-f1f25a18c474", "eventTime": "2017-03-01T07:31:56Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAECWpIXaZgm7Wt2Ky+Kr+UA+QmQ3hhp5a5lTB7eaXG7cV4tlTLzV8T9uUnavBxwwubRiLjVTGzgqKTePCF/EXP8sUMy2SeJGOkzXyNlt+WUDZKLOu6UDOwGGKhPSH97nm2oVHDMdCIDXnrOquQiaIlChqVpdYj8"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9eeb822e-b553-4efc-860d-75d0be01941e", "record_id": "flaws_cloudtrail:0000467:9eeb822e-b553-4efc-860d-75d0be01941e", "row_index": 467, "timestamp": "2017-03-01T07:31:57Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9eeb822e-b553-4efc-860d-75d0be01941e", "eventTime": "2017-03-01T07:31:57Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHX4dFE1Jn9Btk+uoZQ1WvMPqRczrmSiFZkR5i2h0g0Elf9U8T6PvhMe8yO3gyT6QqTDK1tYSWaduXfz8riVQdpWRqMkD5sdi6ErsoEc4qfe6zWaDZGLVYDL2cth82RQqBplxC6gUd6nQDDbn4HfrOd3gI5RR+QIw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e2ac9c3-c4b1-4e01-926e-f4032a95c3b7", "record_id": "flaws_cloudtrail:0000468:5e2ac9c3-c4b1-4e01-926e-f4032a95c3b7", "row_index": 468, "timestamp": "2017-03-01T07:31:58Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e2ac9c3-c4b1-4e01-926e-f4032a95c3b7", "eventTime": "2017-03-01T07:31:58Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAG9xc3v0fOmnR1sUHSIeL6CwaSaeqeE7guFoqNJUoh9AJtfWvzb2q/Z13aTk6Dd7vQeruI4z0yNFZTTr0e/f3sfAdSaaxMkMSVaNmIKpJddnKu0/7TbITWEPdLCRK2wR4NhNb0k9mfVTmHImwUXK27bDEfdwv4="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afb71d47-9b85-4190-98a9-87d4f45c4e17", "record_id": "flaws_cloudtrail:0000469:afb71d47-9b85-4190-98a9-87d4f45c4e17", "row_index": 469, "timestamp": "2017-03-01T07:31:59Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afb71d47-9b85-4190-98a9-87d4f45c4e17", "eventTime": "2017-03-01T07:31:59Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAF/lHOEEr1fALVFuMsoJaF2Pzu3wqBnbTtp+LblC6bM0yjusAgjGtyEIA7p7wCescG5/G9BEnffhqSWQ8k8RO713WEZRO3oXNq1Q72hX/xoR9+CtgDhzUKO7Hhsogl9vY7IZqQSCDNucUE8AiQy2TKdpMDo1Ssi9Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b974c4ee-849b-414e-9182-af931f3ce4a2", "record_id": "flaws_cloudtrail:0000470:b974c4ee-849b-414e-9182-af931f3ce4a2", "row_index": 470, "timestamp": "2017-03-01T07:32:00Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b974c4ee-849b-414e-9182-af931f3ce4a2", "eventTime": "2017-03-01T07:32:00Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFz0jiw5Ta6koPN9ieIgFGibIH21gCvfiDnZcDVKoHq2FePS3zufxdjSPE/hQ/1IKH85ti/f445OLkucXfkixuSc7EB7c8qEDjHFDEa/1BCCZghM5TaOLaLmjcQLtOx6BGkL+THGxcBwAw8um0P/wbs+ajru8Bt9Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d8fecff-e04b-4023-b435-ad2339d08af9", "record_id": "flaws_cloudtrail:0000471:6d8fecff-e04b-4023-b435-ad2339d08af9", "row_index": 471, "timestamp": "2017-03-01T07:32:01Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d8fecff-e04b-4023-b435-ad2339d08af9", "eventTime": "2017-03-01T07:32:01Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAG0haBJ6ym9mRYVcLz3gArZcLazxWMKJ7/QO+ksJJhRt/Rxb4mKoSFS3Z+XMQNL1XG6IxMLGAjsadQ6SDCSy27y5cGw5SwwcLhJ/pk/2lUoVGjgole3xCxswWUuos9+zoek2/L1+3sDtpJ+7NR/UOjgoTWeaYLW"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc3a0059-0650-4e2b-8773-d20f104888aa", "record_id": "flaws_cloudtrail:0000472:bc3a0059-0650-4e2b-8773-d20f104888aa", "row_index": 472, "timestamp": "2017-03-01T07:32:02Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc3a0059-0650-4e2b-8773-d20f104888aa", "eventTime": "2017-03-01T07:32:02Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFHPXIkBeDfRXEqirOkon3hYUiEnQUzosNYsOGolZ7UDgiz5D8hArA9OVBXwo1KX/HHQpGdaX9NHw+3Y/Dt3adeYPfF3Mjdd9pWuoflY9CwVDMQBQEZo6kLTtknX1sqoR8J9YUiSdP7hRnhvWkNiiiN6e9ZmV4cNA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14cdeaf3-5248-4033-a619-3ce02e7cf81c", "record_id": "flaws_cloudtrail:0000473:14cdeaf3-5248-4033-a619-3ce02e7cf81c", "row_index": 473, "timestamp": "2017-03-01T07:32:03Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14cdeaf3-5248-4033-a619-3ce02e7cf81c", "eventTime": "2017-03-01T07:32:03Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFFNCMkcgLQEN+mS8bfUZGA7mpxlRv90/ScNbZBrsopWjzekbfmG56lKp8xDS2MVWUN7kByNBK2GGCNbLQs52Ug2JxyTWQIeB/Mz4omoLzHW1V27MqsBqOa5pHhGca3sba6U1cCFwjAYYmmtVYN/hoQU6Mhvx4PiQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0eea1ff5-e1b3-4cfa-b7d2-5ca5799d8bbd", "record_id": "flaws_cloudtrail:0000474:0eea1ff5-e1b3-4cfa-b7d2-5ca5799d8bbd", "row_index": 474, "timestamp": "2017-03-01T07:32:04Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0eea1ff5-e1b3-4cfa-b7d2-5ca5799d8bbd", "eventTime": "2017-03-01T07:32:04Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFU1/lis009YPDe7lhU1k99J5f3UG0w0TsSb6TFFU3Y+8GyLKojmyZBxi3aMI95djTtxK9Yqt10FIr5S0d4Sn5YN2cwo1bnf8IwL+vx8JzeKZYEJyvJei0OEVUyZtWcaIRgn1DnzVia9nL2rVUZHhVhZhD+aiCKWw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d6e73c5-0a51-4f59-9fe1-dbaea454b345", "record_id": "flaws_cloudtrail:0000475:7d6e73c5-0a51-4f59-9fe1-dbaea454b345", "row_index": 475, "timestamp": "2017-03-01T07:32:05Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d6e73c5-0a51-4f59-9fe1-dbaea454b345", "eventTime": "2017-03-01T07:32:05Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGd3ogxR9W+3v8wAfOR6RrHEhEcP3pAZYLhTMouyY5MufYClJAjxCTM1oq82bUp7s+r+5Go4OwhwAFVvwItyQ2GGoVn+7+uJ8zvfqPro4oSeVwmLZ/QNL+hqZBQanxjPIQtHIZ9o7YqzFMbtUWKTPRcBcXk1b9fRsI="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c2a7b24-86c0-4314-bc62-c058f2cfc4c1", "record_id": "flaws_cloudtrail:0000476:3c2a7b24-86c0-4314-bc62-c058f2cfc4c1", "row_index": 476, "timestamp": "2017-03-01T07:32:06Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c2a7b24-86c0-4314-bc62-c058f2cfc4c1", "eventTime": "2017-03-01T07:32:06Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAH7ZBjOkgNHuhjXHg0816xwFCED4gx/F26ifj+hxG+FF0UZQGZFhFjsuysAQSH1KGFaWDHGHvRJF59QyvVJ+OYm0wIf2xt4WmAfslB9KhjKNScLNKCgCxd9ewVqPoK0QFHKuT2+ks4nh/WPdtSNsMO6WOct5zgwGQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5fc48fb-f8ad-48bc-9312-295b5b7088ba", "record_id": "flaws_cloudtrail:0000477:d5fc48fb-f8ad-48bc-9312-295b5b7088ba", "row_index": 477, "timestamp": "2017-03-01T07:32:06Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5fc48fb-f8ad-48bc-9312-295b5b7088ba", "eventTime": "2017-03-01T07:32:06Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAG/BholMbn2LDvJS/Hc7VFgHnqP0iQ07aQLBohAfh2Jc4FuJ42MnQKpRSfnRFeRfLOrHzmIm1Qt1mtmB5ymMViI5DOQj0hmJnYDx/Jqvw6SfTm5wSRUV5a0GwPlOc78VNpySKGHBjTv4t1BD1si7HvWOEM8szjH"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ba8d33c-fc4c-4d6c-aa53-07cdab6c80c2", "record_id": "flaws_cloudtrail:0000478:6ba8d33c-fc4c-4d6c-aa53-07cdab6c80c2", "row_index": 478, "timestamp": "2017-03-01T07:32:07Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ba8d33c-fc4c-4d6c-aa53-07cdab6c80c2", "eventTime": "2017-03-01T07:32:07Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAF75Q7DapvoHmYXRIBCff88v6OvuTHxLL0D+U+s2ILv+3oUB22D/jA8k5+keFonksjo4kMU58o9v7ESiTY/gJyA62r9BcWpQW8mEbS5phFliHC1KQIGbCp1TAsD34mRamQ72Zhudrctym1ZxsizHKGMH8ukGA7MEg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "469edd3f-7801-4b61-bdb6-0f965a7af628", "record_id": "flaws_cloudtrail:0000479:469edd3f-7801-4b61-bdb6-0f965a7af628", "row_index": 479, "timestamp": "2017-03-01T07:32:08Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "469edd3f-7801-4b61-bdb6-0f965a7af628", "eventTime": "2017-03-01T07:32:08Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGU3NcJffEq4/i1PSV+0a7Aj6TDkzFCro5jbsUTbmauBSyIFO471SlSVePcxDBEuaw7zKeAi/wMUmgOPUdMOgdnEkdreCFz+xc0OO1oAoVNN7CExxNGodmRM3f3cfmQLIURc15lS3mPvQf2rTOjsvhVf5wyh0TOCA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9bce0e9-69f6-495f-9ad8-0331e8eccf52", "record_id": "flaws_cloudtrail:0000480:f9bce0e9-69f6-495f-9ad8-0331e8eccf52", "row_index": 480, "timestamp": "2017-03-01T07:32:09Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9bce0e9-69f6-495f-9ad8-0331e8eccf52", "eventTime": "2017-03-01T07:32:09Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGSEsNTt5FXS5mly8fHvtOKWLMcw3cjkX5HvZ0ApoUJYb8rjX+LfYeaHdZ4CSv1Rld/2D/UUj8o7K6dZkvCppL3n1S7rQevFBU8ReEVWtj5MSUIePyv5e/uv6mIfwkosX7vG0nLlMTldBN9aDqVHuTEiRZEPtig"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01b4c855-de07-4aa2-a9bd-6f1be7a77812", "record_id": "flaws_cloudtrail:0000481:01b4c855-de07-4aa2-a9bd-6f1be7a77812", "row_index": 481, "timestamp": "2017-03-01T07:32:10Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01b4c855-de07-4aa2-a9bd-6f1be7a77812", "eventTime": "2017-03-01T07:32:10Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEn+6Dw9YHdZYZ0oJfs36BgpW2cJ8b5XiHO6lvWAJAqCU6FgMMz75t/ccMwYNNJYErrylH3DN5MEJZGtg2VpDUl/6vxdF9mZbXbg73Fdz8F67xgWFASlxNocfuiOXcU6iVRxLxrkHiQFmjSI+YYzQPwZPAHzr7T"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28eab311-4d26-438d-a21a-8b29f3ea298a", "record_id": "flaws_cloudtrail:0000482:28eab311-4d26-438d-a21a-8b29f3ea298a", "row_index": 482, "timestamp": "2017-03-01T07:32:11Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28eab311-4d26-438d-a21a-8b29f3ea298a", "eventTime": "2017-03-01T07:32:11Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFz1H+dzsg4ir9XrmZGBey6zARPpmHFbCyIusP6qXNm+oj0D7XRyz1ORKSAJysreSALhIEEV/blsKblNiZbrvS4yN9Ht0oR6/ShLHIlMSPPU9DFqY08ugP2qkueJrRK8h02WJTBg2pW3FGdgPr7mg8ZG9Zd7HQ+Iw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9899add0-ee2d-43fa-8d35-c394638e9472", "record_id": "flaws_cloudtrail:0000483:9899add0-ee2d-43fa-8d35-c394638e9472", "row_index": 483, "timestamp": "2017-03-01T07:32:12Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9899add0-ee2d-43fa-8d35-c394638e9472", "eventTime": "2017-03-01T07:32:12Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHjZ74LKy4L+gWjuouaiixKnowzOd8FAQuTqFw7SeUacBafCVVv7bU1kgY1gx4jvSS1NF5XVo0b202CjScG/Kx9lDuraxEUI0/HTRe/+nTx2SZqKN6ruo299jl8YY5MMvWwU6YvcGFHHO1BZFhATo7jad5+aXZ1iA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b0acc22-5212-4703-8cbd-65bbd38f147b", "record_id": "flaws_cloudtrail:0000484:7b0acc22-5212-4703-8cbd-65bbd38f147b", "row_index": 484, "timestamp": "2017-03-01T07:32:13Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b0acc22-5212-4703-8cbd-65bbd38f147b", "eventTime": "2017-03-01T07:32:13Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHmluSpRFQiB8BAMvMgrCWXFV70Gc2qaO3P0o+b+L4O5jvVRj7yysDyflSloamR4jaTLLSe3w/qxAj1HQslBTQlplsBwZop3lBY+mXMhcbu6dG9gQMXnzdqxNVg2alDvrrG8TBMLs0QkWcdedVWkd/aFR6ThSEgbQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "675a1c28-fcd8-42b7-bd77-39afbc25c7c7", "record_id": "flaws_cloudtrail:0000485:675a1c28-fcd8-42b7-bd77-39afbc25c7c7", "row_index": 485, "timestamp": "2017-03-01T07:32:14Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "675a1c28-fcd8-42b7-bd77-39afbc25c7c7", "eventTime": "2017-03-01T07:32:14Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHTSZr2coylc12NoMdWyMTNL67HKCx6l93JLzoG2HBDv8YMhpn8uMcgi1sRIW040ElY3PdjaIgc2UplrNzVK/ooKtA57MZSH1cK7m4lqn3l+AHk6Zj2neY3oDcl6oyVOB1IAeUy1a6RYV5h1MXTTQ4+w9oibvq44w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8feebe3c-7ad4-4833-a72d-be0ffc64641b", "record_id": "flaws_cloudtrail:0000486:8feebe3c-7ad4-4833-a72d-be0ffc64641b", "row_index": 486, "timestamp": "2017-03-01T07:32:15Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8feebe3c-7ad4-4833-a72d-be0ffc64641b", "eventTime": "2017-03-01T07:32:15Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGm6app6Bkt5/giJKpYg8Te5F3GjtxTYI3Rv+6pWV1tzDqj4msfNM9fR4JdST4uBZ7m/GoA0g6h1JrivHbZ0eBuYxPFY67uAA+oyOdUOq4KflQ9CqYHBLJQbnlLJYul+ILr0NdGAVotnltHvAKIT+KMUjghkQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d9cba6f-b703-4a0d-a8a8-4ce66f20c1b3", "record_id": "flaws_cloudtrail:0000487:6d9cba6f-b703-4a0d-a8a8-4ce66f20c1b3", "row_index": 487, "timestamp": "2017-03-01T07:32:16Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d9cba6f-b703-4a0d-a8a8-4ce66f20c1b3", "eventTime": "2017-03-01T07:32:16Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGhOUNiaI0C0IyyDr+5A2XMpNwXD2LbXmizY2JFPx76Phq3vn9UWM0D3hnUtSoimkTwVb8VnGNIAtsxn1rOUTNotdJYDZfNmdef7qqPaxH4lBsjuLudIxHf8TlldwmNwIOX6v59XjUymoiCNFKslg7cFCJTSqwdRw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3e1f45d-beaf-4f7d-b946-8db39ab9aaeb", "record_id": "flaws_cloudtrail:0000488:f3e1f45d-beaf-4f7d-b946-8db39ab9aaeb", "row_index": 488, "timestamp": "2017-03-01T07:32:16Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3e1f45d-beaf-4f7d-b946-8db39ab9aaeb", "eventTime": "2017-03-01T07:32:16Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHChudwGhilk2X88/Mzk8yoZMZFuF1kQjaQF4q7FYiJEGpFXO6QDelfeMYdksa6xq9BqVVIZ/Xn9HZOGnyDLudGFpPMj3RY1V+A5UHByaMs8cmaGBw2nd9UX+2AmB82lCUFbfn3xSeMANwSGGreAn4lmp8="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b7cd5b5-4d77-44e3-ab59-9c8991d666913", "record_id": "flaws_cloudtrail:0000489:9b7cd5b5-4d77-44e3-ab59-9c8991d666913", "row_index": 489, "timestamp": "2017-03-01T07:32:17Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b7cd5b5-4d77-44e3-ab59-9c8991d666913", "eventTime": "2017-03-01T07:32:17Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFy752U5qmJZjYKfGUxWGYDQUV17CoKMRGaHrJGN5WUzXZFUYB58lfsTjKWkK/yRgavPI/pqEm4Ihy3Su7ayLh+CcyIs6BpEzzqMnWYkVeoJdmnt352QKxztxwa7uhOILjApHowvpQ/hUzQHaOLGimgWyteqHs="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "868867ab8-6edf-40a0-8680-b505c93e97e7", "record_id": "flaws_cloudtrail:0000490:868867ab8-6edf-40a0-8680-b505c93e97e7", "row_index": 490, "timestamp": "2017-03-01T07:32:18Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "868867ab8-6edf-40a0-8680-b505c93e97e7", "eventTime": "2017-03-01T07:32:18Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEL2wudWf+SSo6whvGYoueV453OHrZzk0XG842NKTMk+530O02R4iUgDjFeSZWZaypRQansxwHxriELWJhqMGuN+hSz6Nn9oR/jDJtH4lRoNGwui53EOKSXZcvruVudDOH2sIDz/WYtUqPsmh/+EyJOa35YAFsqMw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "721ab413-a34a-4ac7-90a8-84e6a4f9749c", "record_id": "flaws_cloudtrail:0000491:721ab413-a34a-4ac7-90a8-84e6a4f9749c", "row_index": 491, "timestamp": "2017-03-01T07:32:19Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "721ab413-a34a-4ac7-90a8-84e6a4f9749c", "eventTime": "2017-03-01T07:32:19Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHF1ve37REZj6Vr0OJYgFQJW8utfM1kfwqa/Z7qEQm3gPsrCcCTe8Vnxr+Ihpxs9QWEniEd+L7yLAcI+ZgymOUf+I15qAbkV8us5ZNQcv01BQr5SZo4Jeco5a5rnsOrJiXa+gsp6szZoUeRBivxHtupuMjxWnY="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aad31501-bf41-49c2-b5c5-a77b24482b5e", "record_id": "flaws_cloudtrail:0000492:aad31501-bf41-49c2-b5c5-a77b24482b5e", "row_index": 492, "timestamp": "2017-03-01T07:32:20Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aad31501-bf41-49c2-b5c5-a77b24482b5e", "eventTime": "2017-03-01T07:32:20Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEADstraliiiJQC67LVH9yOcm0mDvcBY/8wr753rL81SYXc670CKWm+37eXSKwhX8GFNGmOudPuUHHijf7yOBdi+oniVvcW2WL4XRt9HuAs7gB6WHKuqxBjhB7rOrp+gBJ1QXpkCw3bq5FHQFBsHz06wG0/+vuX"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16039cf-53f5-46e5-b925-ea8d152f9093", "record_id": "flaws_cloudtrail:0000493:16039cf-53f5-46e5-b925-ea8d152f9093", "row_index": 493, "timestamp": "2017-03-01T07:32:21Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16039cf-53f5-46e5-b925-ea8d152f9093", "eventTime": "2017-03-01T07:32:21Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHvG+Kh0n0qSU2ql8I08ZPLAFgT5rfcyBg11fSVlTFPqpgC43J4wRrSzRC1dDTASLK9ECFZ+JJQPcIf8Sv46UTWh9kzrn9HuvIVNTeRGsQbpiXU8Er6fTw4koWIH4sMc77RDuTVvHPJuBI3kReYw4F0ujFG6Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "751971ea-02a1-4b27-9b5a-b46f4530684a", "record_id": "flaws_cloudtrail:0000494:751971ea-02a1-4b27-9b5a-b46f4530684a", "row_index": 494, "timestamp": "2017-03-01T07:32:22Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "751971ea-02a1-4b27-9b5a-b46f4530684a", "eventTime": "2017-03-01T07:32:22Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFd7sHqToMgyRBiyX303KggfbzpKQeibOk2hBQjCBWzeYTbuTlLUcU2/rwkV/4tXkB71RXuzEvmEsf5iYLh2mAnZFU0i4HeDTwC9+P7OKwneTbKcOOV/E8XlUcFGS8MeOiqYJwdpvwMpZvu61JB3m+Foq06XiTPGA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0d4890b-c6c6-4e8d-8f79-c06397cdd2c9", "record_id": "flaws_cloudtrail:0000495:c0d4890b-c6c6-4e8d-8f79-c06397cdd2c9", "row_index": 495, "timestamp": "2017-03-01T07:32:23Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0d4890b-c6c6-4e8d-8f79-c06397cdd2c9", "eventTime": "2017-03-01T07:32:23Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGpKaFncZkvP+bKhFsXFra5XxW8aAdFpUkAkcOvSOXo3nt21GUgXXMglt/QIBo49YUe5d7TxRCsJgSswM+eCnjLnGt2SuWC3npKtrE6OxTNBZih56yCX9C/Do8iIX6jfTgqPfrvUU/Ko7uYEa+oNAhRUQ5FN6o="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74259-0e6d-4737-ba86-d7aa5128ffa9", "record_id": "flaws_cloudtrail:0000496:74259-0e6d-4737-ba86-d7aa5128ffa9", "row_index": 496, "timestamp": "2017-03-01T07:32:24Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74259-0e6d-4737-ba86-d7aa5128ffa9", "eventTime": "2017-03-01T07:32:24Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAE1OYafH8Sgo2KvqcYtx7D0mi8fvpE5f7mp08LL79Kay+r4xyRg0xL61J2oiYLAPf9xMgTdWsLX6KIec7EVQfGtVR46cOTUXnKGWUl7Lck69Jcibj2L/teAZ6gBWhOGlEI/Q6KlCYX544yVqLrjUl8NFhj5Quqp"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82eb6297-0faf-4e7f-9308-4ae2bbf2dbc8", "record_id": "flaws_cloudtrail:0000497:82eb6297-0faf-4e7f-9308-4ae2bbf2dbc8", "row_index": 497, "timestamp": "2017-03-01T07:32:25Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82eb6297-0faf-4e7f-9308-4ae2bbf2dbc8", "eventTime": "2017-03-01T07:32:25Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHl8hw+XKL546F2oCyzFHX0SNbV4KgiHqwWU+W1wcMKfywZjS/yoYF2Kg3mdrLbUr/nlxXM0Lzifa8Yy4QhPDBDI99lJCmxcn9lqrxFzA8I1+hXxMbVn7SYqnbSrMymo/OMrNkAtE3HkNVDIOjw+IqcD6Hu4yOWAg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f09fdb1-8389-4f77-b402-f695dbb6ba41", "record_id": "flaws_cloudtrail:0000498:8f09fdb1-8389-4f77-b402-f695dbb6ba41", "row_index": 498, "timestamp": "2017-03-01T07:32:25Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f09fdb1-8389-4f77-b402-f695dbb6ba41", "eventTime": "2017-03-01T07:32:25Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAH946ud1I7oRZsVh4UBqScIdaCkv5fV7A7uMktQCd3tGQtDvJF2XYMPv3Ym22JtqavItMC5zmfHJLqm3L/n3U82EpJaoXWLfgWtW8gbxuHa6GQIm7swXdpXQ2R1+8Yw0mRLjhlxb6NI/R3UQF823bFqFPvN"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "435558-bce1-4987-b999-b1e1e1e1c447", "record_id": "flaws_cloudtrail:0000499:435558-bce1-4987-b999-b1e1e1e1c447", "row_index": 499, "timestamp": "2017-03-01T07:32:26Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "435558-bce1-4987-b999-b1e1e1e1c447", "eventTime": "2017-03-01T07:32:26Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHkaruKfm1/lLdFyRekoKkYokk9jrtlw17MCdLpcjb/zxQCcszyVAqu8P5HaF1GFMYBNaZXUiEfLNCVs7UJGm57CycoV56asJPI3hI4p59m0ev3LC2YpDpnWGwNfzUDRZBPeXnfedCLrT4Lgp0V3dXUvLEkYXD5HQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "570da016-84d3-4a69-a4f8-004baa7a377f", "record_id": "flaws_cloudtrail:0000500:570da016-84d3-4a69-a4f8-004baa7a377f", "row_index": 500, "timestamp": "2017-03-01T07:32:27Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "570da016-84d3-4a69-a4f8-004baa7a377f", "eventTime": "2017-03-01T07:32:27Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGEKbJXoi7561GfZcQC8WhpdAIe+h2GCLLSmMOOB1zet9kq8oyOHoyZOeS1/HkK3fJA0v7DOAQcyePCOmSn7IY4vGw+xNFt0+NkqiQf82lccbK7Fhm57f9hpa9rTv9MKG0OOAoM/pEGeIgCHfPk50JVTdeBMVS6XQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcd68e76-c1bd-4b20-b059-764134edab5", "record_id": "flaws_cloudtrail:0000501:dcd68e76-c1bd-4b20-b059-764134edab5", "row_index": 501, "timestamp": "2017-03-01T07:32:28Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcd68e76-c1bd-4b20-b059-764134edab5", "eventTime": "2017-03-01T07:32:28Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEzvGvlWuqKK7J9xmcLJxrai0F2/BU6XBN2Qx56LhcBDc+d5Zxvv4Kd9X/sETehgfW27SXDAjB/S1f1fkQZQhc+HoDN1zNBFRh4XZIp+THXQNzelJUOq+1bHHZj04orN/5j5Q8/h9E0P4xDY/uH6F8MtoLs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a74eea41-82c2-4dbc-8df9-489c39203f8", "record_id": "flaws_cloudtrail:0000502:a74eea41-82c2-4dbc-8df9-489c39203f8", "row_index": 502, "timestamp": "2017-03-01T07:32:28Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a74eea41-82c2-4dbc-8df9-489c39203f8", "eventTime": "2017-03-01T07:32:28Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHTL8nWzXHLyQHQ+23f4LWbGRpiDT3qtq6mF3/V1BNZEVyFDze7RNoOsHgsha70JekPHkrFGisMDx1h7jBcF88dy2mjSTxmmgoPHSaPFT83PNISLkXMdaI4J8jd0ZymZdkyl1HsywWD5GS+KXM86ZODjv3+v0G8rw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b28b7a1-21d3-40ac-8b6b-975f06533f93", "record_id": "flaws_cloudtrail:0000503:9b28b7a1-21d3-40ac-8b6b-975f06533f93", "row_index": 503, "timestamp": "2017-03-01T07:32:29Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b28b7a1-21d3-40ac-8b6b-975f06533f93", "eventTime": "2017-03-01T07:32:29Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEtBMLMaDINaPGDHsU+pgoqRo/U9qeZZUtXken9zeDv3ifjeOpJJwFLbpyeEiknf6mxT0ImleEziBQ4moV2GQ32UsWI8h0YPTN9SN0Fe6f22Ew9JCyftnDydUECat9X0PPrXsCWYWaSDgjDgL4hPYftfN6YvA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bccf016-eaf6-405b-8a76-e53420c", "record_id": "flaws_cloudtrail:0000504:1bccf016-eaf6-405b-8a76-e53420c", "row_index": 504, "timestamp": "2017-03-01T07:32:30Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bccf016-eaf6-405b-8a76-e53420c", "eventTime": "2017-03-01T07:32:30Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHlpjxxLMuN2MKOzPnu5nWoQzqEeABqAZxm88d1zuLtj1G7C/fJWl0Uf0u4UTjmK5k2V7/1obl2ozVd4d8E2o1Lz7zeDHybtglzTrNjcoufrxv8avc4ZiOzcrihs51cpvyxZjtd/OJrWOUhhvsLTkMXC+5CaYme"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "283d40d6-441e-4c52-ab0f-f377e4056cc7", "record_id": "flaws_cloudtrail:0000505:283d40d6-441e-4c52-ab0f-f377e4056cc7", "row_index": 505, "timestamp": "2017-03-01T07:32:30Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "283d40d6-441e-4c52-ab0f-f377e4056cc7", "eventTime": "2017-03-01T07:32:30Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGGR05a/4HxwKDQ4dB6mWSpNkSyKINUwYalLqy9ZmZ0vHh6t1rD2rEiEXuWo9j4iu+cBtoDGVLS10UIoBQInjAWP9IK1r/shVtcwJRqI8BKD7K4TjeEMyE4NCl2eB65xjHNvBhdeepREVMB07hrM+arYy2INvgMdg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b0ae9c3-cb7b-47c4-9c19-89b3bf41991", "record_id": "flaws_cloudtrail:0000506:8b0ae9c3-cb7b-47c4-9c19-89b3bf41991", "row_index": 506, "timestamp": "2017-03-01T07:32:31Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b0ae9c3-cb7b-47c4-9c19-89b3bf41991", "eventTime": "2017-03-01T07:32:31Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFH9aEg3CcSew2R5RULp65JxSTH9ZUGidqq6eQLd73F0ZiE3D/6IGaSXLs6ExrURYqaLBids1tePCxRAD0/N+4ZjKgwX2J334KwOm8a/09E8FMcVF+x3jWsXyLKjg6x51WwT3djTUY8Wb1giaNshKnqVWx3sHKU"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b3e0961-fed4-444c-8525-43a2fbdf4a02", "record_id": "flaws_cloudtrail:0000507:1b3e0961-fed4-444c-8525-43a2fbdf4a02", "row_index": 507, "timestamp": "2017-03-01T07:32:32Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b3e0961-fed4-444c-8525-43a2fbdf4a02", "eventTime": "2017-03-01T07:32:32Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGY5pQGxl8GCJmNsHLuQinWEEsu487x4GLhzw777uUkM60ED4a3DXLHDHrHvgDTnIvIobgQyzOVnKNzw71yCMd7lcLrdVeGiEPIn1pW78rpl0ktrvcSoYl6+pCX7P9v7S7A0vpmdDzFKmAxMQMIEnfcHv0EaWqB"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1611b5c8-e273-44ae-8a09-53a7eacfc33b", "record_id": "flaws_cloudtrail:0000508:1611b5c8-e273-44ae-8a09-53a7eacfc33b", "row_index": 508, "timestamp": "2017-03-01T07:32:33Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1611b5c8-e273-44ae-8a09-53a7eacfc33b", "eventTime": "2017-03-01T07:32:33Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAF+kcQhzGt7s4SRuW2VdBO4KSl8LftLciEFqm+pZvjfl1Kmv2gbvaOxClFVqYrNQWal+GMtp42EfkgMRqqWV25NCxYUNjVC46plmcCZfXfMYcbH6CCWatVCG/xWQoLnWViMCufsnDam7KUyD8V286DlcoWTYdC+KQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "891b6479-3558-4faa-9989-f998890f1", "record_id": "flaws_cloudtrail:0000509:891b6479-3558-4faa-9989-f998890f1", "row_index": 509, "timestamp": "2017-03-01T07:32:34Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "891b6479-3558-4faa-9989-f998890f1", "eventTime": "2017-03-01T07:32:34Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFhesqXbCI4J4kY9LL+NdgP2nWaJlryY+Qt4bEmlXzkR/HEfgT01F1OtHdDf6RafFgeCPtLKq9KZVZbo1y5mBDp9oElsYh8zpkLVzHMywQ9/aJh+0pNl6BJ01jMUIP0rcJsmOLsvtM3kiAetZwSpea9m+/0IUp3mxE="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b48bc657-41a0-4896-b1bf-5d45a6e6a890", "record_id": "flaws_cloudtrail:0000510:b48bc657-41a0-4896-b1bf-5d45a6e6a890", "row_index": 510, "timestamp": "2017-03-01T07:32:34Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b48bc657-41a0-4896-b1bf-5d45a6e6a890", "eventTime": "2017-03-01T07:32:34Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEeys6wKr86zR+zrShd3Ojo82yRZXc68I4SdRJuNF+6OPS1jQ5tkhOVRsFIIycd8Zz9XdT3pym55gCKwZSyEPaFjJIoVqAPJSW2pcfY2QU9oUTvbfzxmGiGSGC/+tTDohWB/pSUCl2hsNx32mus8IJW4YyCrzsupg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a02108e-6418-426f-b469-c799e0a7553b", "record_id": "flaws_cloudtrail:0000511:a02108e-6418-426f-b469-c799e0a7553b", "row_index": 511, "timestamp": "2017-03-01T07:32:35Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a02108e-6418-426f-b469-c799e0a7553b", "eventTime": "2017-03-01T07:32:35Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHAjC/FJKCB5kDpC12l/JBuI9JagUnXPq+FVpIgAtcgAa+rFEEDOMhvzWl6TlMdPEwVlWaE7kKqkQlWsjx8N5e6ktFLDu3o4/T7UNoAPKLx040b8BD7XgIDzwE9nTJaMS0ue95ZvQI/rZJp6c/f6/VJL8YY5OZz"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa26f777-6787-44c8-9ab5-213e5e67f55b", "record_id": "flaws_cloudtrail:0000512:aa26f777-6787-44c8-9ab5-213e5e67f55b", "row_index": 512, "timestamp": "2017-03-01T07:32:36Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa26f777-6787-44c8-9ab5-213e5e67f55b", "eventTime": "2017-03-01T07:32:36Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAE9mgRab3tsHbIojJEigvIkjqdbLYkQqN9jxr0whtJngNYrKJn+Cb1aASSP/Oo8Ia8znFkJzmp5XbV7ecGfZuOPeYGX1aYjHsiJVgjMZIjTRTamHK6GhXIefpKeQl8l3bidoMOAKKA4W9aNPm1CmUHL53DyAzEG"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8a88b5c-3b64-403c-9464-e1ea8ceea65d", "record_id": "flaws_cloudtrail:0000513:c8a88b5c-3b64-403c-9464-e1ea8ceea65d", "row_index": 513, "timestamp": "2017-03-01T07:32:37Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8a88b5c-3b64-403c-9464-e1ea8ceea65d", "eventTime": "2017-03-01T07:32:37Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFn4JF7IA8k8jdvNA2TrGOZ5YgjhTZVhlhzowALvLh9D/f0RJCrpkqEV+OM5W6PdEPJH5eBylmRcIXXnErhZfO5a85wAO4gugBdtuKSajwXEfP7Ewz0b01Yw9Ol2AnMYkXWHXxJVirA0juIWEtdOU0JAZGO01ZyUQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f58278-1785-4ff4-963b-056d25c3d1e7", "record_id": "flaws_cloudtrail:0000514:7f58278-1785-4ff4-963b-056d25c3d1e7", "row_index": 514, "timestamp": "2017-03-01T07:32:38Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f58278-1785-4ff4-963b-056d25c3d1e7", "eventTime": "2017-03-01T07:32:38Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGELnKfy9Zn7qCAFBnMjvZPHjDROgKhJymrkauggikuI1yRKjkL7jzAaCH9M9PJoF3TwhEkP6gWcoQkAV9W1rBS9OpvQgxO3Q30nY64tOYRS5yIW8fwberjsBb+6cb18R1dJMPP9YfVmTAFUIjQFwdsa8qgh9mNRWA="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "652e6a1a-5d45-4a5d-bb96-3db7fd6919e8", "record_id": "flaws_cloudtrail:0000515:652e6a1a-5d45-4a5d-bb96-3db7fd6919e8", "row_index": 515, "timestamp": "2017-03-01T07:32:38Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "652e6a1a-5d45-4a5d-bb96-3db7fd6919e8", "eventTime": "2017-03-01T07:32:38Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGPi7sgsyG7hgpn3kPaZgRSiO235a5Cpua4nfT6VeF7SqYoch7CQJqjqb4MMcXU86WQTHkK0+h5SpyQTM0P5IYmQNTRUtPYMgHT6/sehKeMe5KkkzHnk1AF7ZktjbsuhxMtIdYonhRB8wnu6E1ZdoLKvKIsjroOag=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ac732c4-02be-4b68-b0cd-6f9be5a998ab", "record_id": "flaws_cloudtrail:0000516:2ac732c4-02be-4b68-b0cd-6f9be5a998ab", "row_index": 516, "timestamp": "2017-03-01T07:32:39Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ac732c4-02be-4b68-b0cd-6f9be5a998ab", "eventTime": "2017-03-01T07:32:39Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFA8ilNK6igHqtob9fTBnqvTwTwlaRwCmt/662u1Si24FrRgMagkY/4GCf/SLKedM1/CKjleLdlLXhGg2mDVMSceewRjKiVHs5V/VOZHDiE88VWPgO410iDFmsdjTokAmG3R1QIdjr10x2Vbne4OfIEVlp+y6ypEg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "521ab0d1-f8c8-401a-8071-f907019f095", "record_id": "flaws_cloudtrail:0000517:521ab0d1-f8c8-401a-8071-f907019f095", "row_index": 517, "timestamp": "2017-03-01T07:32:40Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "521ab0d1-f8c8-401a-8071-f907019f095", "eventTime": "2017-03-01T07:32:40Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFyf6CwYxdWDGSHxNaOEuim4HsPzVt1McqEULdGHPQ08DJqW2ZSfFjV6Th0vfTQT+tthoSRlyPyKFu34DhvgDPehCx17+lyyOyvtMcEwMpr2FBwepXp1HGx3uYRmdP6qzagHiWB9T2pdlo899PjVbm3rkJU8tlC"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96f825d2-4234-4605-849b-5d067bc7569d", "record_id": "flaws_cloudtrail:0000518:96f825d2-4234-4605-849b-5d067bc7569d", "row_index": 518, "timestamp": "2017-03-01T07:32:40Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96f825d2-4234-4605-849b-5d067bc7569d", "eventTime": "2017-03-01T07:32:40Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEahinxeZPCCTUMDy6grpTiOBHa17gQmXUpRy1tUgnJ8sGx5LbQKDC0qq0l7rHumQHXPkTHmfHF1haTsh/nvEXmiNAJR1K7MMUbmLCAr2oj105k/RMvZQULx9umTejfYctBqfN0bOohNGWPpAFOFnKHBezZ"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d2db291-98ed-4fd7-be19-134aabc2c744", "record_id": "flaws_cloudtrail:0000519:1d2db291-98ed-4fd7-be19-134aabc2c744", "row_index": 519, "timestamp": "2017-03-01T07:32:41Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d2db291-98ed-4fd7-be19-134aabc2c744", "eventTime": "2017-03-01T07:32:41Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGZTb3aQtCDQQBKZiYYbdCHKM4SHMZR9QJJuVMvwWZ2x3j1leFaP+4IKEhj9ZMWiIGd5HZ6T0GG7uiNbfLqmn8jSj+f1sRaoZgcyrEukbPW28KXLQk5Df2OTyNGBgIjng3dMwWLcjUesqfTnrLVL+5KYg+D6o9KLQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1efb5775-44c6-4b89-bed3-04eb82e52fea", "record_id": "flaws_cloudtrail:0000520:1efb5775-44c6-4b89-bed3-04eb82e52fea", "row_index": 520, "timestamp": "2017-03-01T07:32:42Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1efb5775-44c6-4b89-bed3-04eb82e52fea", "eventTime": "2017-03-01T07:32:42Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHRLoqFX8/t6TfJQftmqPXNYBCYWVzzfdcV8mqHbVuInqe3S8A0fv51ARu6hXky71zpwytlFjt8Sad2Wbu1R6rXneqbgxLmaFFMzbPf0LHolY8k1+QYUJIYD/vCG71JfVbyH81Jq5qW2ojJD9PBMDL0+EulU8WUog=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8f9be29-354b-4e82-9abe-23d3e208bfe0", "record_id": "flaws_cloudtrail:0000521:c8f9be29-354b-4e82-9abe-23d3e208bfe0", "row_index": 521, "timestamp": "2017-03-01T07:32:42Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8f9be29-354b-4e82-9abe-23d3e208bfe0", "eventTime": "2017-03-01T07:32:42Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEqeCeIDZ5TkjoOkNs8smHSodMzWNdYSTbQLnK7bSK1tjMvXg82rpsIG2RfTb5SSUf3hL4MlHm8Z741Dt+YkxGdANLXTpxCU2ctFH0ML0btB/sBOigjh1wGCXxTc5AZs7791kmtgRPCmMmEF1gBgYwgdl6QEJew1A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b39e8430-90ab-4120-9dd4-4f2da3938e01", "record_id": "flaws_cloudtrail:0000522:b39e8430-90ab-4120-9dd4-4f2da3938e01", "row_index": 522, "timestamp": "2017-03-01T07:32:43Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b39e8430-90ab-4120-9dd4-4f2da3938e01", "eventTime": "2017-03-01T07:32:43Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHC2JobqIR7GQNnQONf6Y+SmbGnt/ibVQNgcoCv9qsZgblCJi4JI90u1pSiTELMxhR4ifUXNjvec1rsbBEzxZjni6QWURvqcGvCQfbTqxxvdc6zblUktVAr8TR/e5Y15LNTBHu6dNpEJN9wH07nhSHV8Xzg8htA"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "babbadad-b260-49a3-94f4-f9c114315a7e2", "record_id": "flaws_cloudtrail:0000523:babbadad-b260-49a3-94f4-f9c114315a7e2", "row_index": 523, "timestamp": "2017-03-01T07:32:44Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "babbadad-b260-49a3-94f4-f9c114315a7e2", "eventTime": "2017-03-01T07:32:44Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGPYFbtObDJe/MlckqAK/QPPkMZ5L0hF1Y879cgMv7mhQLPVNjhrgHdoY1CgHzBCkfiyy1lN3X0a/10rCpVX9uZmdBeIC9HMoUx2jeNacUP36rnhztt8qU+m902UST64FJUfEBl6glwbWm2WQRdsC0g+CShl0s="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e346f665-7410-43a6-8d27-00cdaa29e67c", "record_id": "flaws_cloudtrail:0000524:e346f665-7410-43a6-8d27-00cdaa29e67c", "row_index": 524, "timestamp": "2017-03-01T07:32:44Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e346f665-7410-43a6-8d27-00cdaa29e67c", "eventTime": "2017-03-01T07:32:44Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHns5FTXQ/2hq/m+Y97h9S1ZRTZBPJ4WT32IvNvTdRv3MXmhNdGhR3obrId3Wee2elD7CQUkn52eYR410r1CGnhd2gWc4tx/cen+jPBnprFxXMwPeIdxnmwdoBSlu/GgtDLJKV0k+4FkMXJ//NN2l2kLHMW2NC4HQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebdec958-6345-4055-b139-9359a9c8e94b", "record_id": "flaws_cloudtrail:0000525:ebdec958-6345-4055-b139-9359a9c8e94b", "row_index": 525, "timestamp": "2017-03-01T07:32:45Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebdec958-6345-4055-b139-9359a9c8e94b", "eventTime": "2017-03-01T07:32:45Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEs9VVVLSs1+MaJ5gzLbomLWh+ExV9o5V0NQ5WynVvWMTXvMv6ftlH8gYFdRyrLnSth+TlGBpnW7KqBqo5EwMyNEJ89wfzU5nxfje5Ss3L7qSwcwIDRiLx0xPlR2eHey5XXEQ33mBed61C7ws7ugx3F82tcFcvFIg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b800c164-640f-40df-8996-c0fee2df0cce", "record_id": "flaws_cloudtrail:0000526:b800c164-640f-40df-8996-c0fee2df0cce", "row_index": 526, "timestamp": "2017-03-01T07:32:46Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b800c164-640f-40df-8996-c0fee2df0cce", "eventTime": "2017-03-01T07:32:46Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGi+3LJkNdamIK6Pl0Qkdr8oTBqgXjXbhw/B6+IWKQQYP4+zSMV2vFT+gwIOcjGkLa0wZTJ4txtBGeEvMYl09I448pWnKRAlkoeIyOiyYH3tm6iyI5BiuVD5APdn48HszHM4bLcbJkTiKCgdCc+NsYq9eIWHV7e3Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d1ee364-9a52-4dc0-8e1d-0545c956b1f2", "record_id": "flaws_cloudtrail:0000527:8d1ee364-9a52-4dc0-8e1d-0545c956b1f2", "row_index": 527, "timestamp": "2017-03-01T07:32:47Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d1ee364-9a52-4dc0-8e1d-0545c956b1f2", "eventTime": "2017-03-01T07:32:47Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFCCpjyTDopzMI9tBCERZ+6TuLbj4kpBLFG41JkZzqW+90efRPYUvTyPQq+qSASoYM6MH34P2ARbuC1rEvHuGPIh5bk/nw6U1jvJGHP/CWNJoUyZJb43EE6KXLqq097KKKJkDSo17o0ge0Tvnp/bLL0nu7nI0g="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78007d3b-c0fc-4076-8468-e8f7ee6341a8", "record_id": "flaws_cloudtrail:0000528:78007d3b-c0fc-4076-8468-e8f7ee6341a8", "row_index": 528, "timestamp": "2017-03-01T07:32:47Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78007d3b-c0fc-4076-8468-e8f7ee6341a8", "eventTime": "2017-03-01T07:32:47Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGMC6v7mwf2v078ACEv2iR4YHqhLx8+TjSiHYLHXyzragaH4RG1TQyJ2ne6UxNZmM061ySHlLSN+HrI6VhKVn7BbYzo/8CWbu2n5VfPnRS/thlg5/16yeiO1c6hzj32zZPPyCrXIwcSwK9Z2VzY0A0uBsIz5mQ/1A=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d118bdff-b49b-46e9-9d8c-6680f975cf3f", "record_id": "flaws_cloudtrail:0000529:d118bdff-b49b-46e9-9d8c-6680f975cf3f", "row_index": 529, "timestamp": "2017-03-01T07:32:48Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d118bdff-b49b-46e9-9d8c-6680f975cf3f", "eventTime": "2017-03-01T07:32:48Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAH2u4/69u2+aKADDS9ImFol662L9lVbFmSV3M7OuYihuJVM6XepRDXxeId7jGqzgcl+jsaZ23BfZ8ENmzqgX9e/MDk34X3jAmCXx2zgivfNNee9hplQ11RsM+rc3ypKoW44nEkhXM07cXisO5RkHfdsFiIh48rnEQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2772dbd5-f05a-489f-87ef-40593698e4cd", "record_id": "flaws_cloudtrail:0000530:2772dbd5-f05a-489f-87ef-40593698e4cd", "row_index": 530, "timestamp": "2017-03-01T07:32:49Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2772dbd5-f05a-489f-87ef-40593698e4cd", "eventTime": "2017-03-01T07:32:49Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFmsmsBDtEcyWnmAh9aTeeEaOoIAduGz58NFSwTSf2kQqkczvTa8MjvzvDIxg2r9htkTMPoPdsKklDAk0tqzHQc73621CpJO9PGKnkwUuStm2SkIVCZz/AbBAjEf8XXTc299UlWrwzfJzM80NVMmKLlCu1Ry3/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd3cc047-ac6c-4265-852b-43331565813b", "record_id": "flaws_cloudtrail:0000531:fd3cc047-ac6c-4265-852b-43331565813b", "row_index": 531, "timestamp": "2017-03-01T07:32:49Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd3cc047-ac6c-4265-852b-43331565813b", "eventTime": "2017-03-01T07:32:49Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEsSVB+4qXoz5XT+rHEe9/luJ31lIYUBm5tH49pVStSvs7CzQ/TxYgBjmhAh7a7aYBOK/MhEanKoBHVONwyfHbY61t0bgeMPkEkwhgY9BklH8ZD+sMDIpYWHQceMr9/qhWuLK+9S1cp6tDOw3tvPi1YQ0RFwyLPLA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "317180aa9-2b3f-4ca2-9848-a360b244e114", "record_id": "flaws_cloudtrail:0000532:317180aa9-2b3f-4ca2-9848-a360b244e114", "row_index": 532, "timestamp": "2017-03-01T07:32:50Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "317180aa9-2b3f-4ca2-9848-a360b244e114", "eventTime": "2017-03-01T07:32:50Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAH823JsgC8IUEvq/I2jlvR4H6FoAD/DXo8ss6HSIOdYXkYwSLFP47AXm4sNF7eehJjyuFBChs846mn1s4RJfErRRK3kRncpiGW5KaphPZhsM+EYJyyKbujiIa+5mq9S07RBlCOwLzPUy33bujbZ8nmc2vrB1RQ="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eca83a64-906c-42a1-bacd-69ef80b004e2", "record_id": "flaws_cloudtrail:0000533:eca83a64-906c-42a1-bacd-69ef80b004e2", "row_index": 533, "timestamp": "2017-03-01T07:32:51Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eca83a64-906c-42a1-bacd-69ef80b004e2", "eventTime": "2017-03-01T07:32:51Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHNJ2OvFFqLzziL6nbdbjKFUp7bQAHSFjL34F8ALsNps2JCOaGRPZe064FM6XbwMokC8OdnwmKAmRs2so+peO1CVo/8zHlfV4kKScHRlZz9oc9ahv47XzVz2gKonB2m28swvMKhkdoH7tLAtFPoQRcSsOW8d6XD"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae461b22-dd21-40e3-8b53-b3d549c3efee", "record_id": "flaws_cloudtrail:0000534:ae461b22-dd21-40e3-8b53-b3d549c3efee", "row_index": 534, "timestamp": "2017-03-01T07:32:52Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae461b22-dd21-40e3-8b53-b3d549c3efee", "eventTime": "2017-03-01T07:32:52Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGl6jeVJYCBSW4OGXKpg39mWl3MJ6wv6P5/bpMQ+FS6KCFFYG1EtDimq2ChjoQ7MTOZhZOA/Sj7dF7ktgYcVWXPX3Tt3x4wb8a0sVzzI8/q8dgFAlabWVaA5L8tFN+a6DixPN5LJ68UpjDZo3V/2Z8NMyOVLKKGww=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cabedb7-b1b4-4d31-acfc-1198f94f91fd", "record_id": "flaws_cloudtrail:0000535:9cabedb7-b1b4-4d31-acfc-1198f94f91fd", "row_index": 535, "timestamp": "2017-03-01T07:32:52Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cabedb7-b1b4-4d31-acfc-1198f94f91fd", "eventTime": "2017-03-01T07:32:52Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFZH4ml8U54BgP/5Ja5C00+/7TZCtP6IJN6AECKZti3IFa9UDKdzXOTzY47/tRcUSb5VTUPojQNggrSzvsUo9J+UdUdVGCEe9BmzSUiRdZrImBOCs8uncPfum2dbwfFrk/a3MZ0SQ/Di5jiBmXYOYlDk9cV9BJybQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff3a0591-5f28-41ee-8af9-a1876b46a1d2", "record_id": "flaws_cloudtrail:0000536:ff3a0591-5f28-41ee-8af9-a1876b46a1d2", "row_index": 536, "timestamp": "2017-03-01T07:32:53Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff3a0591-5f28-41ee-8af9-a1876b46a1d2", "eventTime": "2017-03-01T07:32:53Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHuUhcl2ylG10OLl6vqxSjGEgoqQ2mtvJeKAphA3Txxpe4W8rrOmaSI7RpW1ej89VQQI5oihM+ELoCGZIBd/vFyvv2poy4t+2nH0CyPN+TaNbJz/V2cJmE243phxKT6g1sY1IyhHekOUXaDRYNUss501utj3w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4237a7dc-b4ea-44b2-b97e-9a5094695111", "record_id": "flaws_cloudtrail:0000537:4237a7dc-b4ea-44b2-b97e-9a5094695111", "row_index": 537, "timestamp": "2017-03-01T07:32:54Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4237a7dc-b4ea-44b2-b97e-9a5094695111", "eventTime": "2017-03-01T07:32:54Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGVPrC4JnmcB5ZddvU8+JpIh+vGRCfb2rd7mXBdPin9O4VP7T9c9iG6SH3V67KqGyvxSxGmRPAtH9eZsOJNx6Kjp04mlGNSgLzKY/5IRx6NwL5QtJtYbuLJSAvO08NZazKGA0+J/zFFpPAu2v/W0p1pUdNkIQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f235338d-0e50-4bd4-ac4c-f713d1c9c6e5", "record_id": "flaws_cloudtrail:0000538:f235338d-0e50-4bd4-ac4c-f713d1c9c6e5", "row_index": 538, "timestamp": "2017-03-01T07:32:55Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f235338d-0e50-4bd4-ac4c-f713d1c9c6e5", "eventTime": "2017-03-01T07:32:55Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHq9JhRby5LKnCP+Xw4uT8mJ06aUJXOFaPk3TBeJZc9jodwOAaNxSU7PLiBWQt5TCvQBCkAl3zu9Y6ULP+LG+dnXOOB+fZwf1wwe6HZl5bUxk2uOUamS8/uZh9oIvVWKvZFWQFStaLYguhtqeRMAGi4WNsfB8yVKg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db1db69a-dd10-4da7-9f3c-4af752bfe178", "record_id": "flaws_cloudtrail:0000539:db1db69a-dd10-4da7-9f3c-4af752bfe178", "row_index": 539, "timestamp": "2017-03-01T07:32:55Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db1db69a-dd10-4da7-9f3c-4af752bfe178", "eventTime": "2017-03-01T07:32:55Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFyoGlvQ2NhLzNWgffXah1KQmQrxZYjnDx8nTe743RH0SxZIdLFLAzK0bs+cpS/+7VpfT/4sDBBWG0/5m/iTnP88r4FZl441q+36CSsRKPE8RwjNe5mWr6NnXei3eqhoou1HRgO2qH0x4hDpoyvGBAXyaaNPt02Rw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f48fb07c-a11b-4877-b045-438e3d1d0e63", "record_id": "flaws_cloudtrail:0000540:f48fb07c-a11b-4877-b045-438e3d1d0e63", "row_index": 540, "timestamp": "2017-03-01T07:32:56Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f48fb07c-a11b-4877-b045-438e3d1d0e63", "eventTime": "2017-03-01T07:32:56Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEg9HV3CEohtnm3n+4sCpRAi+ITk/Mm51yk7kcWgKfLPSe7lKjRp1je1xn07vDkmmQheXD+JbV6JYfBSTDjcwfJAon4UHq9K3rNr9iBp4qYmYZKciZEQQCG/qS3p/0KfBQvTPJtR6d8ATIuod6GMkGcMxZBW6X1NQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e8e8c1d-d3a8-44ed-915e-e461bf3d3ef5", "record_id": "flaws_cloudtrail:0000541:0e8e8c1d-d3a8-44ed-915e-e461bf3d3ef5", "row_index": 541, "timestamp": "2017-03-01T07:32:57Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e8e8c1d-d3a8-44ed-915e-e461bf3d3ef5", "eventTime": "2017-03-01T07:32:57Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEG10S3OhUnBoqchwYu5rUegkcr/xr++Ph2yUiPis7xlv4VvhgMejBToNsOFjcT5HFxL9bBUIqlxApPQX8XNIzx8amP7njss1xm4cosVJsWPFwrDKo2lH2xvWZRdlczMijukT5Sv5w5xBOrsW8xwvoAEPxttbY="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1150f988-6f43-40a4-9a5f-cd7f10a07454", "record_id": "flaws_cloudtrail:0000542:1150f988-6f43-40a4-9a5f-cd7f10a07454", "row_index": 542, "timestamp": "2017-03-01T07:32:57Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1150f988-6f43-40a4-9a5f-cd7f10a07454", "eventTime": "2017-03-01T07:32:57Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGB33g8hy1PbQqL14tfSbvKAZ8Qk511gtCKQzL48qb23eziVURPyOJleMRPIgpaW9dbLJK9r0rUWm6rUCYgAqS0YM77CtHIrZL8lnLTP89Uu9FCSu3eQ9QwLDjJq/cpNp5zewS+JiHzpWLlnEltr2P6HppQ1Bvtqg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3723c67f-e629-4b01-a2cf-01cd30f9f611", "record_id": "flaws_cloudtrail:0000543:3723c67f-e629-4b01-a2cf-01cd30f9f611", "row_index": 543, "timestamp": "2017-03-01T07:32:58Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3723c67f-e629-4b01-a2cf-01cd30f9f611", "eventTime": "2017-03-01T07:32:58Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEpA9cDVJQ8bLvKPoCUaW7+08UGzuBxAlzvQmFz7We2b79jaf3Wv8SppW7YGzrDBgI/iFbGWnwaB3JGwEx8i1nboCkuirHFvUuZWR2OmkQK+2qOduwzVUyere1kTEQayI2o1mycQRvAnQnhi/raBWOcRv2VtsPuxQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ab73d07-0ea0-403b-bd99-871852ce7c4e4", "record_id": "flaws_cloudtrail:0000544:0ab73d07-0ea0-403b-bd99-871852ce7c4e4", "row_index": 544, "timestamp": "2017-03-01T07:32:59Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ab73d07-0ea0-403b-bd99-871852ce7c4e4", "eventTime": "2017-03-01T07:32:59Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHmgNWInpbmvT7HaUnUWhRMT/bAxSv31WdNG5Ogo7Vt53Q0mQLr7KMhi8GY2b2c4bZ0yf/NLZGx05/07GQNgBqfiVYsBgpgNMb/aMXSHFlwzoA5BZF801Phq2a9D6TJhY6wrqN18KLxLVlzgpsfyWAx7Qm1sRjtTg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a81ba52-06c1-4eeb-b584-f70afe47466d", "record_id": "flaws_cloudtrail:0000545:9a81ba52-06c1-4eeb-b584-f70afe47466d", "row_index": 545, "timestamp": "2017-03-01T07:33:00Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a81ba52-06c1-4eeb-b584-f70afe47466d", "eventTime": "2017-03-01T07:33:00Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHkoe6UyJWo4xpaHkehIpd23bQuG55DXjenH7BvTZg9D6cTg8yErG6P2XyEKXmJgL31q6+FQ+H3ZzpN3DuD2axx140/B41ylLpsNEDmgr/h3pmkXEYSP6wJA+LMo/Ww1PX0YXbSkc6KUKiBrkzZ7I7SkHu8qlp6vw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9cb5fa8-0e03-4b1f-9be3-8ee5d400a22c", "record_id": "flaws_cloudtrail:0000546:f9cb5fa8-0e03-4b1f-9be3-8ee5d400a22c", "row_index": 546, "timestamp": "2017-03-01T07:33:00Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9cb5fa8-0e03-4b1f-9be3-8ee5d400a22c", "eventTime": "2017-03-01T07:33:00Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGm2YDP1eTasEkAAVEF0YvoBgTQKQvRLk16vuOzeoO6BZROf4xofkGGR2EcWkJSUiqy5i8/dp7W2eeqUoOKxLalCzZw5s5jVrWNPzNMvbn4mrcPWePVbB/p8M4q+EfAaQYhq4y3eybAHJVSLDuMelVZuBt2sZu0DQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "848a8aca-4407-4707-8a99-f076f1a884ea", "record_id": "flaws_cloudtrail:0000547:848a8aca-4407-4707-8a99-f076f1a884ea", "row_index": 547, "timestamp": "2017-03-01T07:33:01Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "848a8aca-4407-4707-8a99-f076f1a884ea", "eventTime": "2017-03-01T07:33:01Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGr2qaFBTaeHLvWMx3hD8e+lfEoxNpgNRqwdPhIIxS0N2Lk2lR5uRQP790z3GXfKyhRiwMJ70PknxaGOUMPULpvP+TVPMSabx6Wdoo0B6bsA/XF9pfoGv/eiYBhGUO+FOrxenAdV1V9sa6BWSypJPfLmmmV"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e42a3010-3924-485d-b652-2c53c0b57d06", "record_id": "flaws_cloudtrail:0000548:e42a3010-3924-485d-b652-2c53c0b57d06", "row_index": 548, "timestamp": "2017-03-01T07:33:02Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 877, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e42a3010-3924-485d-b652-2c53c0b57d06", "eventTime": "2017-03-01T07:33:02Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFHF9i3MFvvqE6VTc4vR5Z68H+1Y+0wS7ZTFzwo14ufNoPlY19ay7johUQTsQs0haDzM/cR62W08ZVxtrWzh+phuK0RxevAjX19v1bTtDdcTv3sYIloVR5RKm2B5xYXe+e3LnHbI+qLUvq3vrWbVsmkhZY="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69e5f89b-da27-407c-affb-9df21f046c51", "record_id": "flaws_cloudtrail:0000549:69e5f89b-da27-407c-affb-9df21f046c51", "row_index": 549, "timestamp": "2017-03-01T07:33:03Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69e5f89b-da27-407c-affb-9df21f046c51", "eventTime": "2017-03-01T07:33:03Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEjX+wsoYqKoZW40PixbCvewP7P8Hr3xfpzzhW/ALgHoxIYGF3JBrJKxOODRNIJUrkVUjUiLCU77t3KjBoG++nPNCbpUjY1Fs/TI2xeuf26cpTZz//7ZBKrcFHD9SEr8IgKTmz/X8Qo/jyulEpg9G6TLKtqom2dzQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2fb1728-c413-4747-8354-60fbb2e56f78", "record_id": "flaws_cloudtrail:0000550:c2fb1728-c413-4747-8354-60fbb2e56f78", "row_index": 550, "timestamp": "2017-03-01T07:33:03Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2fb1728-c413-4747-8354-60fbb2e56f78", "eventTime": "2017-03-01T07:33:03Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAH5hpGckQ6hQ6Fxxu2LwIOyRyWDqLgbRiisvI7oHpA4w6Xc0oKmbVV8zE4IlrWKTE9n6tG3KZ0ptQEI43vbZL3g/2sBMudkPs7KR/IWLLOfgSp696fUoTnmOrBVq+AGv5YlO8F+cJD1NVoXm3Ooapx5yCN/U0D3bA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dffa657f-0d48-4c5d-a785-26a19d67292c", "record_id": "flaws_cloudtrail:0000551:dffa657f-0d48-4c5d-a785-26a19d67292c", "row_index": 551, "timestamp": "2017-03-01T07:33:04Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dffa657f-0d48-4c5d-a785-26a19d67292c", "eventTime": "2017-03-01T07:33:04Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAG9k6+oPZLuW9gcM8I2H44uoug17BXoxih92iaCYXWf1ScoR9eLfcpDtBjpsyF9vdTAzGqrluqTg3iIWt+goC+H4F8g9KEUxNy/w/QmIandtZdB+Vp2QKYGGBTkpQzrbgAfgNZ6TWgMTonbMQ2ed0OWRncUyZeN"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1aeedb82-9787-4faa-b2fa-187e8a1c016d", "record_id": "flaws_cloudtrail:0000552:1aeedb82-9787-4faa-b2fa-187e8a1c016d", "row_index": 552, "timestamp": "2017-03-01T07:33:05Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1aeedb82-9787-4faa-b2fa-187e8a1c016d", "eventTime": "2017-03-01T07:33:05Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFyV/Vp4X/9573EIxWvUPrcR0MNi7qbrWURnBFmyDR4a0l83sMefkTjYsT7RseOgOkGBmXwQupDI1QORWNvHY8fbYj6p9PM3uNE2WVGYry4QslmKQ8YpXTODBpk/KxbKvcGFZNf29B8mhQNn8D61TGPQ8B5YA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d29c00d8-d91a-4c34-b932-585058f74d", "record_id": "flaws_cloudtrail:0000553:d29c00d8-d91a-4c34-b932-585058f74d", "row_index": 553, "timestamp": "2017-03-01T07:33:05Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d29c00d8-d91a-4c34-b932-585058f74d", "eventTime": "2017-03-01T07:33:05Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFCFbg6OZ82tcJIz4blnmwE55BS388YljTSFeiFbXOz1Aq1cW8HllFMPaCvw6EEhQ7Kn8v0gsxXbHfVlhyoFcheGu/bMgQ9g4IbOhlRqO8C1/y8DvzjFDmXF7lS/IW9gAgd7b1EW9ilU2y0z/k5Sz8Os3MvPXAeXw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f4583d3-ff0f-4809-b6b1-20e854142b5", "record_id": "flaws_cloudtrail:0000554:9f4583d3-ff0f-4809-b6b1-20e854142b5", "row_index": 554, "timestamp": "2017-03-01T07:33:06Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f4583d3-ff0f-4809-b6b1-20e854142b5", "eventTime": "2017-03-01T07:33:06Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAE5BUEe2cQvhrjC9LfMix8w+HlwgjKbmNjJrOE51tGG65DaH+CsRi/YE0xBE2A3fCM7cMjFdEqJHVpHEQRHON0BxGoZQ5nayRnsOYNeAyVk8h88Xhemg/xifYuajCDDQIuf82B8j0L0s9UP2ioe7B7zgAmLhx+9bg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77661-0885-4a48-8c2a-48d17d21956b", "record_id": "flaws_cloudtrail:0000555:77661-0885-4a48-8c2a-48d17d21956b", "row_index": 555, "timestamp": "2017-03-01T07:33:07Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77661-0885-4a48-8c2a-48d17d21956b", "eventTime": "2017-03-01T07:33:07Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHGYFRIa9Ro/p+6YRAD4CVWrN1dOVlm6rbZLA8C6BDPLWhCFXt7Cldu4yquOyg1miAYD3h0IeSaZQ8PhXgHMuz/cqJFGT6T2szPEL+CLPOaVchdYpkmj5EPiZqjN4YsHu23lAAKaBqsRVd7rzuCzjCIAOW+Ug8J"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fddb6d55-3c3e-443c-bc4a-64caf52bf8ff", "record_id": "flaws_cloudtrail:0000556:fddb6d55-3c3e-443c-bc4a-64caf52bf8ff", "row_index": 556, "timestamp": "2017-03-01T07:33:08Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fddb6d55-3c3e-443c-bc4a-64caf52bf8ff", "eventTime": "2017-03-01T07:33:08Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFFYk3LjxfZtNQ/qC5OLi7bLfz4fmj4WatXexIn1mjc1k0bHNagVtvioBpNn29GebiMiGVutSZQXWqcVwaJeFHBZiEcTKVBoWR4sim8r9HmAUxPhOUDZ4tG3Wm8C7KvxdfJ/4FGqiwvv1s0cBktsW2cHxLO0J4B"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "578ff86f-283a-49ca-8692-077f0ee3ba94", "record_id": "flaws_cloudtrail:0000557:578ff86f-283a-49ca-8692-077f0ee3ba94", "row_index": 557, "timestamp": "2017-03-01T07:33:08Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "578ff86f-283a-49ca-8692-077f0ee3ba94", "eventTime": "2017-03-01T07:33:08Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAG/Bb2XJNBMUhBHRCqr3tABbYNetL6nAhoknW1iRDovUopsPgtYk/PGEfKsn29jUNt+NDSGwpII2TzCzUm8s9aDZGRRMTqyQuAgMATmvEs1MGjWW60rc9HbEvNppXVKDEWwrIMIXrXjUSMMCtkajeGlPSQZMrJ87g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdbfdb29-1dd5-4229-896c-ed8ac13fa741", "record_id": "flaws_cloudtrail:0000558:fdbfdb29-1dd5-4229-896c-ed8ac13fa741", "row_index": 558, "timestamp": "2017-03-01T07:33:09Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdbfdb29-1dd5-4229-896c-ed8ac13fa741", "eventTime": "2017-03-01T07:33:09Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFlmhQgYFx1Iv5dxeX8GqCU1AgUTy0DVwKoA/4na53DFIcvTU2aahog9q5czAwBJDJShfJIrUw/MSGbNNSjDEuRYo9bG8zBJuTGKyzMBnPo79ude211TtCK99Cc5v/GLL0CNRGhIVf+3flcdorTdYwxIkyUlMW6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e801dd8d-c6ee-4d3d-8a49-e5d77dd1918a", "record_id": "flaws_cloudtrail:0000559:e801dd8d-c6ee-4d3d-8a49-e5d77dd1918a", "row_index": 559, "timestamp": "2017-03-01T07:33:10Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e801dd8d-c6ee-4d3d-8a49-e5d77dd1918a", "eventTime": "2017-03-01T07:33:10Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGxXmR5DNayxjDuozBdyI0CnElncsUWQwaAOrAZ3dYHrYFfaU0lMq4BnMxn0HXUfg0a5W+UOFa+QP+BQXeNGecQjNUOovg6EBo86nR8s29FkSdaBUC7N5fdrDWUIbd6G1LYz0sN4MOaeBUGLYMfQRuYJWAf6Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e8d180-ff16-4bae-b6ad-21d0c30a56ae", "record_id": "flaws_cloudtrail:0000560:20e8d180-ff16-4bae-b6ad-21d0c30a56ae", "row_index": 560, "timestamp": "2017-03-01T07:33:10Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e8d180-ff16-4bae-b6ad-21d0c30a56ae", "eventTime": "2017-03-01T07:33:10Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHbQDPmQgjTZrgvq1VU1S2ynPy3ph/EgcPHWWVUu7Q5wdZvfUq62xOeoq+4l2wtVGurAmJkr19ua3lmcs12O4jsIV5cZafuYa77I6B7XLlTbveoXF+56oCfkgl4MG4KfUVoNXcDCu+TXa7cA2s8tjdtVdEZrRM="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc2adbe7-1f84-4598-b9cb-bfdae05cc17f", "record_id": "flaws_cloudtrail:0000561:bc2adbe7-1f84-4598-b9cb-bfdae05cc17f", "row_index": 561, "timestamp": "2017-03-01T07:33:11Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc2adbe7-1f84-4598-b9cb-bfdae05cc17f", "eventTime": "2017-03-01T07:33:11Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHHMfIS724ifriZHYjjZd/UCerWyIOfsZsJNxeElm23y1thjhcMaW1FjlHl1W0vMg1iU/7ByyXxoIg2LBZI5lJbsGNwmnxfDEkFfWds7WBvnC76oXaX5rgkSlHnCSv2VjzOl3FsV7yeeZByUlrK8+qJyPRavA8+"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "592d4496-9793-4a3a-8f60-b182611b7cb", "record_id": "flaws_cloudtrail:0000562:592d4496-9793-4a3a-8f60-b182611b7cb", "row_index": 562, "timestamp": "2017-03-01T07:33:12Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "592d4496-9793-4a3a-8f60-b182611b7cb", "eventTime": "2017-03-01T07:33:12Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFMaRHolXkzAey4cHSC5K9qWEfJ4TWi/Qp560e/TVcA4Tx3OXLytubImh11BfQs3Jrq85l4mn6kCOOqKFPo9gPNpjXW3EXj9IhCW/NxJXZYfcowxSjDV08L+/SI3Z594erDAqcsvcKsTYm187GDwjWasGMt4mHNiA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afdf30ef-0011-4616-9767-980806a1640", "record_id": "flaws_cloudtrail:0000563:afdf30ef-0011-4616-9767-980806a1640", "row_index": 563, "timestamp": "2017-03-01T07:33:13Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afdf30ef-0011-4616-9767-980806a1640", "eventTime": "2017-03-01T07:33:13Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHflQm/apDW1//D6EUp/7oY/YQZa2LvLL+Z5s4j8hUybhse9QwXrTvUWZWkJaQRjn5Mg/mlGmEEURPW3orDW6vmWX4Nuy3pZzzhZeQs+wDH1WKrHsREEJNj1Xgq/oYq9C7WtJVBwtcSKdTAlWx10aGdTa4ubug4ww=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01cdfcf3-9554-451f-bd02-971fd8e882d4", "record_id": "flaws_cloudtrail:0000564:01cdfcf3-9554-451f-bd02-971fd8e882d4", "row_index": 564, "timestamp": "2017-03-01T07:33:14Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01cdfcf3-9554-451f-bd02-971fd8e882d4", "eventTime": "2017-03-01T07:33:14Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFQe0QX7CYQfUL+BFDjhCd+0RKgxXNqoMW8xk2XmIPAq2brBMMBNY7MZuWeKOM0h6KqGbDrcL2tSpV8ll6o0JPB0xI0rOtQBpvfUXxEES0NlgmMjAOfqHUrUSCC+fmvVwSNLsx91yoic47FyNzblgpqv3j4gIA="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55471b1-5be1-4527-8cb8-4ac5135f6cb0", "record_id": "flaws_cloudtrail:0000565:55471b1-5be1-4527-8cb8-4ac5135f6cb0", "row_index": 565, "timestamp": "2017-03-01T07:33:14Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55471b1-5be1-4527-8cb8-4ac5135f6cb0", "eventTime": "2017-03-01T07:33:14Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFPMC8Mc30ZSlIt/Arp0KdaUYzYexzdsgwcEnn9+fkdD5RLWHKgaQpOiTIUv+kpSu8Wjdfx6vt9ghEvjWtT+mEalx4btB4qFnT6hwjIygR0qitDcMIwaN8stFHBc3ON71wC0p/DpV4sXYkaL9Ora4rft2b7Plm/"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f6aee3a-bb08-4011-ab91-a33eab3c54fa", "record_id": "flaws_cloudtrail:0000566:4f6aee3a-bb08-4011-ab91-a33eab3c54fa", "row_index": 566, "timestamp": "2017-03-01T07:33:15Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f6aee3a-bb08-4011-ab91-a33eab3c54fa", "eventTime": "2017-03-01T07:33:15Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGlDYct+810H+UsWVAPuRwK1x2+6XAUIgMqrJG70VikanZHdz2cNue1C1nmOGa2McTLUXGtlDRgIl0AfyZWbQrYffaiLbHaAIt0H6y12lxxKqrOiCdz9TcgSD6UQ3OgaRGHHMaAVZI3DqTlnE+1nZOJ+PT105ByNQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af5d60b8-a54c-4bbc-a450-a9dc267306b", "record_id": "flaws_cloudtrail:0000567:af5d60b8-a54c-4bbc-a450-a9dc267306b", "row_index": 567, "timestamp": "2017-03-01T07:33:16Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af5d60b8-a54c-4bbc-a450-a9dc267306b", "eventTime": "2017-03-01T07:33:16Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEMOVoXoEmFvXtOjQkY3drG2ue80460K8Jq30w8oM/vDsCKJ3YcvcHx0mIAGdFCVoBZx4uZ7WM37fPxo3WMPxWZJWnrAO5w4gM4L11z6G6BK5pWZTyxhf0CZ9Bufv36tx1akWcvSLeA4IBdvz6F0LKdnCka6fk65Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "619a08e7-507e-43c1-b08e-c1f7e0f0c047", "record_id": "flaws_cloudtrail:0000568:619a08e7-507e-43c1-b08e-c1f7e0f0c047", "row_index": 568, "timestamp": "2017-03-01T07:33:16Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "619a08e7-507e-43c1-b08e-c1f7e0f0c047", "eventTime": "2017-03-01T07:33:16Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHpKw/I3WrkB3igPdhYIw2KUaHB3HKEMIEYuoibfKMUnuXzVUofS2xsRmI8fDjsUwVglr4KpTScpeb6HpBnfLSqL5/zhOs87w422764WrF7Tr+qIObnELX99RCbOg6U183fp1YOU4azf3ForlKH/IV31ZZk8mAzH+w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51c999fd-3dbe-4d12-b66e-d004c82a86eb", "record_id": "flaws_cloudtrail:0000569:51c999fd-3dbe-4d12-b66e-d004c82a86eb", "row_index": 569, "timestamp": "2017-03-01T07:33:17Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51c999fd-3dbe-4d12-b66e-d004c82a86eb", "eventTime": "2017-03-01T07:33:17Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHIocnsnoncgC/k26p4PQkuJ5cn0K6xkKvRLT2fjP/RdAKCSpbeqEnrXyM6TT1yUi1jTeaWlR9cLlvJ7uMyDlN+Q0P8YoCqpE6vbmqUjnDMfLMTipGhzTLmgoqwjgTrfjllEPTYucvIRP+JDMrFVGr0yu1LxkTI"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1cad175d-9ce5-4c23-99cd-3f68852eca63", "record_id": "flaws_cloudtrail:0000570:1cad175d-9ce5-4c23-99cd-3f68852eca63", "row_index": 570, "timestamp": "2017-03-01T07:33:17Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1cad175d-9ce5-4c23-99cd-3f68852eca63", "eventTime": "2017-03-01T07:33:17Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGFeYk6/sc9yha0Pxg9pcWEKKDKP4/CznlLbvSyxMjLoqybZeB0tqgr6mw18qZuZybSMZ7Sr2LMZo995AgIH+ldiYYJREwJBA9DoAqUpEgcWY1WktZ3EOLGdSZkc+YkpF8fzYuYsvKaq7G+3ImVQ4eSzaVXw7AF3Q=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22e6a7f2-456e-4a71-878c-c740fc077be9", "record_id": "flaws_cloudtrail:0000571:22e6a7f2-456e-4a71-878c-c740fc077be9", "row_index": 571, "timestamp": "2017-03-01T07:33:18Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22e6a7f2-456e-4a71-878c-c740fc077be9", "eventTime": "2017-03-01T07:33:18Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGwA0rch6alP+nAnuIqpB58SlYvBtliDu1asUslTquyUt6ZUzicD7cMUtRd25jCWhyOP+sVjGkQYMzgkax2x1QPyj8sEeiVMP9879kYrJSbNLY6GVbD1c2nS9keP13zaGo7dUopTEv24VyIfNIGgPRpQiGmiJ7WlA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4375e940-5734-4f23-b3cb-55c572638f62", "record_id": "flaws_cloudtrail:0000572:4375e940-5734-4f23-b3cb-55c572638f62", "row_index": 572, "timestamp": "2017-03-01T07:33:19Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4375e940-5734-4f23-b3cb-55c572638f62", "eventTime": "2017-03-01T07:33:19Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEVZeOKomkdn7fp8O5ccZqtsCBNbp8TPC206GU8ARzjnsS4puW7h/T9uj0iTuxk7uzrXx5aq+jgdTbg1it6UnVet2PszfoNQuxJDcgAc9oLvHyQJegCNi5nhiUr9OuFBBmsWOcb7mJDpr6ZufiPAtyohP6lZSn1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db6d302e-e454-4041-a69b-d62b4fddfd71", "record_id": "flaws_cloudtrail:0000573:db6d302e-e454-4041-a69b-d62b4fddfd71", "row_index": 573, "timestamp": "2017-03-01T07:33:20Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db6d302e-e454-4041-a69b-d62b4fddfd71", "eventTime": "2017-03-01T07:33:20Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEBDA5VUQzSIap3mmqMBuUYc+RZNVuYE9PwVezbZPb07CJ+9F8ZFVBuptNJ/gMG7+QuSARj4Zreh8NUoTCI+zlUx3pwMGwocjvt0kcbhO3RKK1/oBQdaA+4sIsFP+5Lc/SVlCsP7NfH508QtMgOYK+kxAFwaS4maw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7301e30f-c579-4549-9a04-b2c219890a4f", "record_id": "flaws_cloudtrail:0000574:7301e30f-c579-4549-9a04-b2c219890a4f", "row_index": 574, "timestamp": "2017-03-01T07:33:21Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7301e30f-c579-4549-9a04-b2c219890a4f", "eventTime": "2017-03-01T07:33:21Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAG27pVD9xfvH1VkmunMCI5ajZn9i4c23YtUySY/MDXVic1f6ZxqEzD1V30iVBKE53rNgJyAY21G1z9RYuV18vIFJ7isWNbdt3foXAm5OJt3KzYXJzWCxMRwDXrH5qNRwgSI5JiH4Y/J9palVUFCe6AdM5z7b02lZQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "062860d6-5c9c-478b-ad69-2a4c16293b5a", "record_id": "flaws_cloudtrail:0000575:062860d6-5c9c-478b-ad69-2a4c16293b5a", "row_index": 575, "timestamp": "2017-03-01T07:33:21Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "062860d6-5c9c-478b-ad69-2a4c16293b5a", "eventTime": "2017-03-01T07:33:21Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFBibW3pIhrGKRumFSe8m/fvahQBjjg5RpudumHx/yyoY41eznhU+zAkHalzcrdAD5382oJOaMJofjTAj7ZJAjk0UeZYDc8mCFoG9feIOxGEZZLbUwm1OMGz8iQ5QQ+xTJY61umflUnTNCERQIDwRfyidpMvRkCag=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e941eb0-0db9-4f19-87df-9a8897b710a0", "record_id": "flaws_cloudtrail:0000576:0e941eb0-0db9-4f19-87df-9a8897b710a0", "row_index": 576, "timestamp": "2017-03-01T07:33:22Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e941eb0-0db9-4f19-87df-9a8897b710a0", "eventTime": "2017-03-01T07:33:22Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEfFehtS3EvrcZdYR7FTCyEIk1dFWhr++GywzbGt1tRgkFQAl3UtNWZVR1YMXZQlD27pVf0DLD61XsuN8mbQWEXpK2Ah0gQvNobNEZadxAh/AzhpYK/vb4J8gBmVMu8lNIhLQM+n6M7z0zV+JOq4Tw+wcVI+IjKYg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "387d42c9-bcbf-41f0-8033-bc75ac26e192", "record_id": "flaws_cloudtrail:0000577:387d42c9-bcbf-41f0-8033-bc75ac26e192", "row_index": 577, "timestamp": "2017-03-01T07:33:23Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "387d42c9-bcbf-41f0-8033-bc75ac26e192", "eventTime": "2017-03-01T07:33:23Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEptPagz9pPQ/Iwda1DGy937yt2ZTOrxUZxV4+2+kir4QmXGhkCqR5maQpq0ce4S3Pvd3lM3MKRdlKcez6+UlvbRCOZQP9K1N5IKZwUmzpjWf+sMeUb4f6AtNGXpBsm/fNBTKl857TpoPKwk3XsakGz6jX1XP9NJA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c063802f-7a31-4b15-9590-d02a39f80d7f", "record_id": "flaws_cloudtrail:0000578:c063802f-7a31-4b15-9590-d02a39f80d7f", "row_index": 578, "timestamp": "2017-03-01T07:33:23Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c063802f-7a31-4b15-9590-d02a39f80d7f", "eventTime": "2017-03-01T07:33:23Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFfcvqXnJQQCpdMWvBWeW0qzIqn0ldKC0aPUUEIEgiopYtuqCEqMWk6e2IWdoOa8HhTcYDE72Cjyf24JNGKK4nxqER6trez13T6tEwJjSZ7WwIwYPKX0u6zNWNssyWxTWnPkZcrV9uHeb1x4pSK0bYDRvPJpDQz4w=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa758695-27b9-4515-bb0a-3e32a52e8f18", "record_id": "flaws_cloudtrail:0000579:0aa758695-27b9-4515-bb0a-3e32a52e8f18", "row_index": 579, "timestamp": "2017-03-01T07:33:24Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 882, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa758695-27b9-4515-bb0a-3e32a52e8f18", "eventTime": "2017-03-01T07:33:24Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEJmSPbbwcTBIBhB18RHTUqoCu/vZx17cERId98VLFmygouRRttZ45GjTbjnj8s17xIOvb2n6Tk8i69w7RNKkyaFRmPgHsfcWUiTUbDCSr+//m4hiLpfnL4VVDkFkp1WJdc/C3Lj5GVve0nRWycVKawMa2lwKGC"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd565f80-0cd9-4c43-8a9f-fccd2a34e14c", "record_id": "flaws_cloudtrail:0000580:bd565f80-0cd9-4c43-8a9f-fccd2a34e14c", "row_index": 580, "timestamp": "2017-03-01T07:33:25Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd565f80-0cd9-4c43-8a9f-fccd2a34e14c", "eventTime": "2017-03-01T07:33:25Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFMyBP8vmlvemQj4rfh1VI5h1P5Z5GtmfbEF0F4toYosmVW2BduVAJ8g21bhDYSFUXfGXV8bZAEcWvvq09+VGwsH+gY2DNGbaNYgsjdQvGSbdQpZe2vuBo0Ihy3xEFsiBEWU4ff+wEy+Jm6dmH4ZXeNV/EDgA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07ea45d2-c0ed-4a95-a9d8-5c725bca39e3", "record_id": "flaws_cloudtrail:0000581:07ea45d2-c0ed-4a95-a9d8-5c725bca39e3", "row_index": 581, "timestamp": "2017-03-01T07:33:25Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07ea45d2-c0ed-4a95-a9d8-5c725bca39e3", "eventTime": "2017-03-01T07:33:25Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFDqWKHc8gHIsub1CtcPTzIbh12Iy5JRko2E1Fx4qWzR/WHt1XrDyP5FEaTMXmYP+TT/1vTd7Wo6/EV8O6iaSMksKZwQBg2OZGDpAwnEKV7rfddoQACUPregxK7VLm7kHYA9ivIRt6lq3oSqC44byACnpf9gg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc5d4ef0-5ed1-4227-99c9-956eca5291c2", "record_id": "flaws_cloudtrail:0000582:fc5d4ef0-5ed1-4227-99c9-956eca5291c2", "row_index": 582, "timestamp": "2017-03-01T07:33:26Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc5d4ef0-5ed1-4227-99c9-956eca5291c2", "eventTime": "2017-03-01T07:33:26Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFGU2eMilMnEfg4JWIkXWBp3DpwmPlplqWJRLdYT7nb/RRmffoZTyLvcRL3KV1aWcFunyFx/Cl6q1MzxbMPsq/qphl0n7/3Dge286ADr7/v4e92V8KfxpleOHodvWWyNE4trC724FI7LyvFUMMENx8G3gss606aVw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "852d94bb-0c3e-4c6d-8d55-a75aa0f9b8c5", "record_id": "flaws_cloudtrail:0000583:852d94bb-0c3e-4c6d-8d55-a75aa0f9b8c5", "row_index": 583, "timestamp": "2017-03-01T07:33:27Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "852d94bb-0c3e-4c6d-8d55-a75aa0f9b8c5", "eventTime": "2017-03-01T07:33:27Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGRQWjHOnuIRtIKFirOo6wIDoK3AhkMVgYJ2NHI2VMyAsFxAFBIofRHs4zgWCsn0k7iL6bP8KfBeG+6fukBFSmd6eWXwbrYIcnhMqnB9arbf7UzPnWpGHxKAmpxU1JVdS2DeLLuI/isOIo4LLlB3zGmDPLoUFVDVQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5202fffc-83da-47bb-b5cf-670ca456bf5a", "record_id": "flaws_cloudtrail:0000584:5202fffc-83da-47bb-b5cf-670ca456bf5a", "row_index": 584, "timestamp": "2017-03-01T07:33:27Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5202fffc-83da-47bb-b5cf-670ca456bf5a", "eventTime": "2017-03-01T07:33:27Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHSGvhzw153quIHoZYmV8bTrFEDgHfJdRRHDPmMV5t8eeFjTqeYIjLCIkQCLxLLuHjplqQG/dFuV1TkIBn7sF0hJ0XmmZOGtoW0F0GUXlALaMIC2ElcVyU3E4hMI+FBSDsUJWEseNqBtiErtUEuQs18GT5EodtNag=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f20601-0482-4137-bffd-197d426bbe50", "record_id": "flaws_cloudtrail:0000585:a1f20601-0482-4137-bffd-197d426bbe50", "row_index": 585, "timestamp": "2017-03-01T07:33:28Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f20601-0482-4137-bffd-197d426bbe50", "eventTime": "2017-03-01T07:33:28Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGpJBF/PoVgtNeZ0RlLOm62KZTf8ZFJBZg6Bb4g6gEZjNEjNFq7Unn7aXYSObunAy2BrjCKDi+NE9gLHa6bDn0F0r8wuOLwkS3P+LvBd3hYp7wDu2hBDgezF1TGNKLRl6gIQBIkkIarP1CeTfNiuiArdRkWNF89/g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13249fa-f6ed-460e-802c-900072130293", "record_id": "flaws_cloudtrail:0000586:13249fa-f6ed-460e-802c-900072130293", "row_index": 586, "timestamp": "2017-03-01T07:33:28Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13249fa-f6ed-460e-802c-900072130293", "eventTime": "2017-03-01T07:33:28Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFdpHK+3k5DJAaFiC1aJUOIFQIViuHT6hwHE66xGDJ9VhNOyY93C5zxpHoK2sDXMuxtnh6HLI5sQUeZRe6lEvr+TgPZjIGuVmdqTpKMeIdFJWrWg0VAkmPFxL4xLsArCqgv/4meGRlvIMQ4z3JeafvlPpIWPFTsaQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dd6b51c-f9aa-483e-8da7-d06648c7f6", "record_id": "flaws_cloudtrail:0000587:3dd6b51c-f9aa-483e-8da7-d06648c7f6", "row_index": 587, "timestamp": "2017-03-01T07:33:29Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dd6b51c-f9aa-483e-8da7-d06648c7f6", "eventTime": "2017-03-01T07:33:29Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEmagW8dv/Uq6z+E5Ix+Gf/1QhKsGnWcIiII+2LGDbpKWAQY3WfRBveLe2guL/vySnGvY2vBcz5Dvh3cYANz04BMppV0F7Acc0ggvVToyMxlgJpQR2JPREKzvO6NHb1vH4MkcpEIpi7vJMBhM6GZVICPZ3IfSf7cg=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaae78ef-5341-4b54-926e-2ed435a44d3f", "record_id": "flaws_cloudtrail:0000588:eaae78ef-5341-4b54-926e-2ed435a44d3f", "row_index": 588, "timestamp": "2017-03-01T07:33:30Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaae78ef-5341-4b54-926e-2ed435a44d3f", "eventTime": "2017-03-01T07:33:30Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHL1euLqQ7QeIfQ94N7hhY0y3476Vqsgv11LSEEDSOJqtPv1mIV5tHwHVPAxRJ8j7a6E084oMJqBjIuU5itkjpeNMsUBKYuFlPGS+Yd36u04DfS4vV7p7f5HSsbaa42QU3hrE9JQJ7YNESki8k60g/5i7mXjYRHdQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d0f9c09-2dfe-43e0-9a6f-cd6b652a218e", "record_id": "flaws_cloudtrail:0000589:1d0f9c09-2dfe-43e0-9a6f-cd6b652a218e", "row_index": 589, "timestamp": "2017-03-01T07:33:30Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d0f9c09-2dfe-43e0-9a6f-cd6b652a218e", "eventTime": "2017-03-01T07:33:30Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEK6Um3+zsLE8fOKPeQfUP/3+zfwPBAq4BFQ/XmyXQ4yqL2BhhxiVESBxs3QmdlOIHpdfX6yb+rQMJWyHDNS7SxLr+vYIupKY58XbKxpHNikE1B5rrCx095G9TZwn8Eaeh65zj35jdOCpzFnkrpBbgeSgkdFR4V"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a72c3dc-268c-421c-8b42-ec3520b0ded0", "record_id": "flaws_cloudtrail:0000590:0a72c3dc-268c-421c-8b42-ec3520b0ded0", "row_index": 590, "timestamp": "2017-03-01T07:33:31Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a72c3dc-268c-421c-8b42-ec3520b0ded0", "eventTime": "2017-03-01T07:33:31Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAH8wlpva67gShMA74AO4+PkC6C6iA6x9B23aWmENkY7ZPNIaXNvrS1buY+brwiFf0faHHQEeTWGpXs5RDDGVN3DWNB8zfnvsWQOiKDaJOUE1T9q4kb/E6KajdcUQJnaDqLZABgxEFeTwz7aNn5vs5efqHWFsTxB"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fa07404-cd6c-4388-88fb-176cc6a9a638", "record_id": "flaws_cloudtrail:0000591:8fa07404-cd6c-4388-88fb-176cc6a9a638", "row_index": 591, "timestamp": "2017-03-01T07:33:32Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 886, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fa07404-cd6c-4388-88fb-176cc6a9a638", "eventTime": "2017-03-01T07:33:32Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGbEX/N+yFHmS6j9tsj9nqqdhThQohl0ck2meQS5Gb3/IGSx8Nf9YXC5YZULA731hVxTL2OUNrpgbgl4XMU4N0zsmXMXEDPDXtMT0siZJqAu1staSEB0kBZn+1wzO1EOuunI6/Mam6mjuyy5djsbM+C/149ToXE0g=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "58166dd0-5695-444d-8723-a472b27246c", "record_id": "flaws_cloudtrail:0000592:58166dd0-5695-444d-8723-a472b27246c", "row_index": 592, "timestamp": "2017-03-01T07:33:33Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "58166dd0-5695-444d-8723-a472b27246c", "eventTime": "2017-03-01T07:33:33Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHSi2lPQU4LD72NIH0cra7/i3oAvPiGZ4cnIP1dBK8dUqLHCL4taQailRArr0su0zGGC6/pl/3sl2a5AmhqQDBsF9lp8LkUVopkLBTJxLpSU8dBdTjKB8m5+sjnrL6gSkb58/MKTaiIuQD/FvjOmAfSSMtHtWlTPQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0fd8413e-6d55-4d12-9d69-89128e87138", "record_id": "flaws_cloudtrail:0000593:0fd8413e-6d55-4d12-9d69-89128e87138", "row_index": 593, "timestamp": "2017-03-01T07:33:33Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0fd8413e-6d55-4d12-9d69-89128e87138", "eventTime": "2017-03-01T07:33:33Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEDbxIrzi7rHjzGlasV4qaxD0Z4H/4g1Ry3+HJ1DbOzMqc+o+OZyyZhcE0KKLKLa/9Lyhjzl9BBhaKn7gJ1Ct61eD+YzsiqWzmingMvmJwOHD3nI8CiUDJVH+9xzJE7B8ZVnzMayFhmPvtDo0SiZHrRpNLaNALfIQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d1b0ea2-afa7-458a-9c6c-8e392849c0ad", "record_id": "flaws_cloudtrail:0000594:2d1b0ea2-afa7-458a-9c6c-8e392849c0ad", "row_index": 594, "timestamp": "2017-03-01T07:33:34Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d1b0ea2-afa7-458a-9c6c-8e392849c0ad", "eventTime": "2017-03-01T07:33:34Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAEtIak7DDXnxt3HEhGzZTAsEWwFXbWnJl9i7eC6MAELOuKGSLhN5n0q/asy1pmfo96W6KxWRFN9yB5T7JQ4szVc9XGK3uguZzD8UX0jkxRIVA5EJF5LOCBKEkvsWKgOr8GxdyrproTky7I7NDmF3zNhtrecKV2P"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7e354f1-d8d7-43de-9d72-1347c51e1b83", "record_id": "flaws_cloudtrail:0000595:c7e354f1-d8d7-43de-9d72-1347c51e1b83", "row_index": 595, "timestamp": "2017-03-01T07:33:34Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7e354f1-d8d7-43de-9d72-1347c51e1b83", "eventTime": "2017-03-01T07:33:34Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGg7CO9SwcXNzIhZvj6LxVEYwKEEfN0mZ2ZkCW22V14q9if76ITkuDMKiMd8pXkXuGT0i0Uwg2b1OQvj6KUUFYJ7sRwAuJ601SUE5bojz0WVjUAjYaAIxvt4okhJoFOFf4nlcRWeJ/ew1Ae53AbNQmy2NPyrFLjug=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d79c1ff-959d-48ea-8658-f317ef9aeea3", "record_id": "flaws_cloudtrail:0000596:7d79c1ff-959d-48ea-8658-f317ef9aeea3", "row_index": 596, "timestamp": "2017-03-01T07:33:35Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d79c1ff-959d-48ea-8658-f317ef9aeea3", "eventTime": "2017-03-01T07:33:35Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGQCyUAiRFn3wTtadC/RyJRlaoIQX5LlouGz9YJE5eStoZuhdBxQeC98zWC48N/vQ8oYEMp6p2t+fxJLkYjdarrsMtPUcyVkinfpplB4+zg343fXXJWTwSIM1WuIo4wg7aGIIZgl1+ReLMHHczT5h6v3B3Q6nyF"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab581b2-47bd-4bb2-8236-472e840b01e8", "record_id": "flaws_cloudtrail:0000597:1ab581b2-47bd-4bb2-8236-472e840b01e8", "row_index": 597, "timestamp": "2017-03-01T07:33:36Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab581b2-47bd-4bb2-8236-472e840b01e8", "eventTime": "2017-03-01T07:33:36Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAF+APl8+g99ojH8xjb7YMK1zcaHu5Ezg5IAqwG9TWGpGPgjG5W6JZBPM0JSzW50OBJ9cCRfAhhd8VutJ7bbSNA3SJq6CCUiB0Z0BtGuxWvSvqqzgzu/9JjDaGAVSn4LVS41so5eS4KLKK7k1qZdxBHpgB8SVlaB"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec4a05a3-7397-40f9-aa5a-ce7eab55824a", "record_id": "flaws_cloudtrail:0000598:ec4a05a3-7397-40f9-aa5a-ce7eab55824a", "row_index": 598, "timestamp": "2017-03-01T07:33:36Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec4a05a3-7397-40f9-aa5a-ce7eab55824a", "eventTime": "2017-03-01T07:33:36Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAH/jvkRTCo7A/LeHvhU64a8aM55daWb5cmlkJY1Pkn3IT8T8zO1+vGNZUPXnU01x3YId7+EJdEpmF/tm4Cd9xEGy6wxu3+lUr9FMgKxM44u/ykRfgcu+rcCxliC9+oHP+4LZEfjaIj9BrEvJ+E0Cu4UIKTPve/7mrQ="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89ca6fcd-07ed-48e1-b1ac-e1edf4a1c626", "record_id": "flaws_cloudtrail:0000599:89ca6fcd-07ed-48e1-b1ac-e1edf4a1c626", "row_index": 599, "timestamp": "2017-03-01T07:33:37Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89ca6fcd-07ed-48e1-b1ac-e1edf4a1c626", "eventTime": "2017-03-01T07:33:37Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHILSY/XAnvVMBaYHfOp/u5nmR1crIXoGyNcoJxcgPzm4oprqONWyolPVuS8YFFFT2cjvvyibPiIpFUDmFYnHcnQqaEie28wplWM//+1k3YVgVUbFJhF/BrOiZxzlhO/kIvDRg+5Qu7Tzixtj1spyvoRu/4h4c="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c519dc3-6cf6-4928-9fa4-1dc4ab30632", "record_id": "flaws_cloudtrail:0000600:6c519dc3-6cf6-4928-9fa4-1dc4ab30632", "row_index": 600, "timestamp": "2017-03-01T07:33:37Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 884, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c519dc3-6cf6-4928-9fa4-1dc4ab30632", "eventTime": "2017-03-01T07:33:37Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAHkJ6BnV8iZ8HFc8uTZulnkV3SE9I8YsZ2rPzOOclT0VXWPcWtVJOKS8NL+z0qlGlhcOfXNTFfKNhuWG9PK5NINXU7POFXXBz2niE8o6MFjEOAcl9EGrCiBrML7Z1UgpGY2lG9PdrDjcpvvgQWqnR46H+SJu0sQlw=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "722c72b8-4681-4921-9d68-60893caa157e", "record_id": "flaws_cloudtrail:0000601:722c72b8-4681-4921-9d68-60893caa157e", "row_index": 601, "timestamp": "2017-03-01T07:33:38Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 883, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "722c72b8-4681-4921-9d68-60893caa157e", "eventTime": "2017-03-01T07:33:38Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFINu1kb5fi1vWxGbKnN3U9dgS4ZHRZBrkw14DZz6cil38DqTVCSy2OVOdl1XdsK4AFqROOXwMH6yY/QhpupaK6vMRhFWF65uK+uTGgVTBG6sJ3QW/DfJ5sg8Xu5vfbr7C/Phx9JK/Z2hh9NprCzBTTJvHbaSSnrQ=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ee0c5ee-88e6-4be9-a20c-6040cd9daad5", "record_id": "flaws_cloudtrail:0000602:8ee0c5ee-88e6-4be9-a20c-6040cd9daad5", "row_index": 602, "timestamp": "2017-03-01T07:33:39Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 885, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ee0c5ee-88e6-4be9-a20c-6040cd9daad5", "eventTime": "2017-03-01T07:33:39Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAFPgcVnq2ylzD6O9xovx9wfmY3rkFsipZ3BqY0vaubDF1PoNrwr7+9GxBlZVja1oZlwNxJawlEKszUc5uYZZae8/sWv/sMs3SGYYZEYj1XGWgNX7PrQreUAolds+5VdcCFmSDKWMogvmbsfZtRWXTPLH7bPVuJqSA=="}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "355f295d-3520-49b1-aaa9-b94a17d9a60d", "record_id": "flaws_cloudtrail:0000603:355f295d-3520-49b1-aaa9-b94a17d9a60d", "row_index": 603, "timestamp": "2017-03-01T07:33:39Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "355f295d-3520-49b1-aaa9-b94a17d9a60d", "eventTime": "2017-03-01T07:33:39Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAER9dLmtHbZT0kjoKc2ol4pOUOJnL7NDjsz+oc2s10Zt8WmIVULoeqVvKUZeH/6I9bYsZkH187zjfsi0zBt+M9u22UEQyxBkLH3a9qK3v64Rt6Cc5YpE7n2JE7lMhAcW1r8jJ8v0aQtgXAwAHK8M6dHrH5mD1/r"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8d32a9e-34cc-459a-ad85-d0195d7796fd", "record_id": "flaws_cloudtrail:0000604:a8d32a9e-34cc-459a-ad85-d0195d7796fd", "row_index": 604, "timestamp": "2017-03-01T07:33:40Z", "event_type": "DescribeSpotPriceHistory", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA1ZBTOEKWKVHP6GHZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "6.84.9.35", "user_agent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 881, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8d32a9e-34cc-459a-ad85-d0195d7796fd", "eventTime": "2017-03-01T07:33:40Z", "eventName": "DescribeSpotPriceHistory", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "6.84.9.35", "userAgent": "aws-cli/1.2.9 Python/3.4.3 Linux/4.4.0-53-generic", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA1ZBTOEKWKVHP6GHZ", "userName": "backup"}, "requestParameters": {"instanceTypeSet": {}, "productDescriptionSet": {}, "nextToken": "AAGb6gt2mvtkzhq9BiHREEjwFTjR/z/OHJ8JEaK1acohtedpTq4HAH3aKorfFsnJj1ZmuA3WJmd6q60Ks4CZWiq/iZQRl5tJ7fxFB3LrTBZwV+uf1t3WsQXrWt7r9S5P6XWGoj5BbN/ibgMvhf5RI94t77atADH3"}, "resources": []}}