Task: attack_reconstruction (flaws_cloudtrail)
Prompt: One principal appears to gain a foothold and then conduct a broad AWS inventory sweep spanning IAM, EC2/VPC, S3, Lambda, and RDS. Identify the responsible principal, the MITRE ATT&CK technique that best describes the behavior, the supporting CloudTrail record_ids grouped by each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e0920e1-b337-4357-8f1f-b75e6b44bd94", "record_id": "flaws_cloudtrail:0000000:6e0920e1-b337-4357-8f1f-b75e6b44bd94", "row_index": 0, "timestamp": "2018-07-31T14:47:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e0920e1-b337-4357-8f1f-b75e6b44bd94", "eventTime": "2018-07-31T14:47:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-athena-query-results-c8e11dec2738-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c30524b-b9ec-4816-a5a6-c108e122f6ed", "record_id": "flaws_cloudtrail:0000001:4c30524b-b9ec-4816-a5a6-c108e122f6ed", "row_index": 1, "timestamp": "2018-07-31T14:47:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c30524b-b9ec-4816-a5a6-c108e122f6ed", "eventTime": "2018-07-31T14:47:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-athena-query-results-us-east-1-962689744791", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ebfd575a-7459-4be5-92c7-46aae991a6c1", "record_id": "flaws_cloudtrail:0000002:ebfd575a-7459-4be5-92c7-46aae991a6c1", "row_index": 2, "timestamp": "2018-07-31T14:47:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ebfd575a-7459-4be5-92c7-46aae991a6c1", "eventTime": "2018-07-31T14:47:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-email-forwarder", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54340b51-a3eb-4adc-8d8f-622172122aa1", "record_id": "flaws_cloudtrail:0000003:54340b51-a3eb-4adc-8d8f-622172122aa1", "row_index": 3, "timestamp": "2018-07-31T14:47:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54340b51-a3eb-4adc-8d8f-622172122aa1", "eventTime": "2018-07-31T14:47:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-scripts-af973a6653a4-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce4321a1-f1fd-4666-a3f0-4e04c0e79ca8", "record_id": "flaws_cloudtrail:0000004:ce4321a1-f1fd-4666-a3f0-4e04c0e79ca8", "row_index": 4, "timestamp": "2018-07-31T14:47:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce4321a1-f1fd-4666-a3f0-4e04c0e79ca8", "eventTime": "2018-07-31T14:47:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-scripts-2f4547903259-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20edad00-3729-476f-a57d-f77227c762e5", "record_id": "flaws_cloudtrail:0000005:20edad00-3729-476f-a57d-f77227c762e5", "row_index": 5, "timestamp": "2018-07-31T14:47:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20edad00-3729-476f-a57d-f77227c762e5", "eventTime": "2018-07-31T14:47:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-scripts-2af12648e54c-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617969d0d-d8fa-4131-be5b-1cea22202222", "record_id": "flaws_cloudtrail:0000006:617969d0d-d8fa-4131-be5b-1cea22202222", "row_index": 6, "timestamp": "2018-07-31T14:47:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617969d0d-d8fa-4131-be5b-1cea22202222", "eventTime": "2018-07-31T14:47:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-scripts-035bb4a0f4b7-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33496f-a6c8-4aa6-b528-303b82c4c427", "record_id": "flaws_cloudtrail:0000007:33496f-a6c8-4aa6-b528-303b82c4c427", "row_index": 7, "timestamp": "2018-07-31T14:47:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33496f-a6c8-4aa6-b528-303b82c4c427", "eventTime": "2018-07-31T14:47:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-scripts-23918fa3c6a4-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96b5ab4e-7608-42af-9076-c00e30d040c5", "record_id": "flaws_cloudtrail:0000008:96b5ab4e-7608-42af-9076-c00e30d040c5", "row_index": 8, "timestamp": "2018-07-31T14:47:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96b5ab4e-7608-42af-9076-c00e30d040c5", "eventTime": "2018-07-31T14:47:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-temporary-658b954c4460-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "366270-dfe1-4883-9843-ac0a7c32b36f", "record_id": "flaws_cloudtrail:0000009:366270-dfe1-4883-9843-ac0a7c32b36f", "row_index": 9, "timestamp": "2018-07-31T14:47:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "366270-dfe1-4883-9843-ac0a7c32b36f", "eventTime": "2018-07-31T14:47:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-temporary-25ab34629a16-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aad7bc5f-a006-4d17-b19e-9bffc2106f3c", "record_id": "flaws_cloudtrail:0000010:aad7bc5f-a006-4d17-b19e-9bffc2106f3c", "row_index": 10, "timestamp": "2018-07-31T14:47:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aad7bc5f-a006-4d17-b19e-9bffc2106f3c", "eventTime": "2018-07-31T14:47:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-temporary-3bd3822b90a3-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4773d462-f321-4895-a10c-00f37c314a21", "record_id": "flaws_cloudtrail:0000011:4773d462-f321-4895-a10c-00f37c314a21", "row_index": 11, "timestamp": "2018-07-31T14:47:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4773d462-f321-4895-a10c-00f37c314a21", "eventTime": "2018-07-31T14:47:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-glue-temporary-4e65a044a157-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcfc1d1a-cb1b-42b0-b934-336301cecd179", "record_id": "flaws_cloudtrail:0000012:fcfc1d1a-cb1b-42b0-b934-336301cecd179", "row_index": 12, "timestamp": "2018-07-31T14:47:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcfc1d1a-cb1b-42b0-b934-336301cecd179", "eventTime": "2018-07-31T14:47:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-4fecb42b9382-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81c61b89-f37c-4b29-85da-4ef21d13d801", "record_id": "flaws_cloudtrail:0000013:81c61b89-f37c-4b29-85da-4ef21d13d801", "row_index": 13, "timestamp": "2018-07-31T14:47:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81c61b89-f37c-4b29-85da-4ef21d13d801", "eventTime": "2018-07-31T14:47:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-db12111ba4f6-eu-west-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "502d7d08-558f-4b93-92b8-085407d49", "record_id": "flaws_cloudtrail:0000014:502d7d08-558f-4b93-92b8-085407d49", "row_index": 14, "timestamp": "2018-07-31T14:47:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "502d7d08-558f-4b93-92b8-085407d49", "eventTime": "2018-07-31T14:47:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-db12111ba4f6-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ad19c0-518d-441b-8543-c1fac6e95078", "record_id": "flaws_cloudtrail:0000015:d1ad19c0-518d-441b-8543-c1fac6e95078", "row_index": 15, "timestamp": "2018-07-31T14:47:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ad19c0-518d-441b-8543-c1fac6e95078", "eventTime": "2018-07-31T14:47:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-6f23e12de594-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcf5280b-6eef-425f-9ed0-32abcd821e66", "record_id": "flaws_cloudtrail:0000016:bcf5280b-6eef-425f-9ed0-32abcd821e66", "row_index": 16, "timestamp": "2018-07-31T14:47:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcf5280b-6eef-425f-9ed0-32abcd821e66", "eventTime": "2018-07-31T14:47:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-0d4cf10b660e-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cfddf1f-41ee-4965-a46e-1892736b7f79", "record_id": "flaws_cloudtrail:0000017:4cfddf1f-41ee-4965-a46e-1892736b7f79", "row_index": 17, "timestamp": "2018-07-31T14:47:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cfddf1f-41ee-4965-a46e-1892736b7f79", "eventTime": "2018-07-31T14:47:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-dd92a403a247-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2102ed79-d972-49ba-bd1f-76be40ceb57d", "record_id": "flaws_cloudtrail:0000018:2102ed79-d972-49ba-bd1f-76be40ceb57d", "row_index": 18, "timestamp": "2018-07-31T14:47:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2102ed79-d972-49ba-bd1f-76be40ceb57d", "eventTime": "2018-07-31T14:47:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-62219c3fc945-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "764aaa1b-734e-4ec5-a3f2-1e165bae15de", "record_id": "flaws_cloudtrail:0000019:764aaa1b-734e-4ec5-a3f2-1e165bae15de", "row_index": 19, "timestamp": "2018-07-31T14:47:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "764aaa1b-734e-4ec5-a3f2-1e165bae15de", "eventTime": "2018-07-31T14:47:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-95663c2425ad-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "453610c1-cc26-4bb3-892c-d8a433efbe65", "record_id": "flaws_cloudtrail:0000020:453610c1-cc26-4bb3-892c-d8a433efbe65", "row_index": 20, "timestamp": "2018-07-31T14:47:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "453610c1-cc26-4bb3-892c-d8a433efbe65", "eventTime": "2018-07-31T14:47:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-01a83594c965-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea7cd6ea-80d3-41f9-8ce1-cef5f8c4a672", "record_id": "flaws_cloudtrail:0000021:ea7cd6ea-80d3-41f9-8ce1-cef5f8c4a672", "row_index": 21, "timestamp": "2018-07-31T14:47:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea7cd6ea-80d3-41f9-8ce1-cef5f8c4a672", "eventTime": "2018-07-31T14:47:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-425bd4102960-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f264786cb-577d-444a-a2bf-04e3c0e4fd8b", "record_id": "flaws_cloudtrail:0000022:f264786cb-577d-444a-a2bf-04e3c0e4fd8b", "row_index": 22, "timestamp": "2018-07-31T14:47:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f264786cb-577d-444a-a2bf-04e3c0e4fd8b", "eventTime": "2018-07-31T14:47:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-a65ba461f822-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72b970e-ce46-44a3-a5ae-b469a77f6ace", "record_id": "flaws_cloudtrail:0000023:d72b970e-ce46-44a3-a5ae-b469a77f6ace", "row_index": 23, "timestamp": "2018-07-31T14:47:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72b970e-ce46-44a3-a5ae-b469a77f6ace", "eventTime": "2018-07-31T14:47:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-h2h", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03e2a274-9393-4f53-89d6-1d0393da26db", "record_id": "flaws_cloudtrail:0000024:03e2a274-9393-4f53-89d6-1d0393da26db", "row_index": 24, "timestamp": "2018-07-31T14:47:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03e2a274-9393-4f53-89d6-1d0393da26db", "eventTime": "2018-07-31T14:47:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-logs-h2h-east", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5da11d9-31e4-4784-b386-f9e857a5a8e0", "record_id": "flaws_cloudtrail:0000025:a5da11d9-31e4-4784-b386-f9e857a5a8e0", "row_index": 25, "timestamp": "2018-07-31T14:47:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5da11d9-31e4-4784-b386-f9e857a5a8e0", "eventTime": "2018-07-31T14:47:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-opsworks-cm-test-chef-automate-fljlmkqh75sg", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fceb0865-d301-48d9-b593-31056b8200c6", "record_id": "flaws_cloudtrail:0000026:fceb0865-d301-48d9-b593-31056b8200c6", "row_index": 26, "timestamp": "2018-07-31T14:47:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fceb0865-d301-48d9-b593-31056b8200c6", "eventTime": "2018-07-31T14:47:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-prod-wordpress-bucket-buyit", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b102d39a-de62-4a85-867f-8a6bef625950", "record_id": "flaws_cloudtrail:0000027:b102d39a-de62-4a85-867f-8a6bef625950", "row_index": 27, "timestamp": "2018-07-31T14:47:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b102d39a-de62-4a85-867f-8a6bef625950", "eventTime": "2018-07-31T14:47:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-f7d92b0cf22d-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ef65f09-c0c8-4c9a-b1fa-a7159aa7ed53", "record_id": "flaws_cloudtrail:0000028:4ef65f09-c0c8-4c9a-b1fa-a7159aa7ed53", "row_index": 28, "timestamp": "2018-07-31T14:47:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ef65f09-c0c8-4c9a-b1fa-a7159aa7ed53", "eventTime": "2018-07-31T14:47:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-0644f29097f2-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ad5ee7b-d4c2-4d0e-829f-6e1397c1b59f", "record_id": "flaws_cloudtrail:0000029:4ad5ee7b-d4c2-4d0e-829f-6e1397c1b59f", "row_index": 29, "timestamp": "2018-07-31T14:47:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ad5ee7b-d4c2-4d0e-829f-6e1397c1b59f", "eventTime": "2018-07-31T14:47:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-64d6a8cde2df-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f728519d-ed21-4ad8-945b-8d604cb1fdff", "record_id": "flaws_cloudtrail:0000030:4f728519d-ed21-4ad8-945b-8d604cb1fdff", "row_index": 30, "timestamp": "2018-07-31T14:47:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f728519d-ed21-4ad8-945b-8d604cb1fdff", "eventTime": "2018-07-31T14:47:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-aea77fff275a-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffb9c263-79f3-4b21-85bd-c38d2bb00567", "record_id": "flaws_cloudtrail:0000031:ffb9c263-79f3-4b21-85bd-c38d2bb00567", "row_index": 31, "timestamp": "2018-07-31T14:47:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffb9c263-79f3-4b21-85bd-c38d2bb00567", "eventTime": "2018-07-31T14:47:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-2a242ac18a0f-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6a97af7c-076d-4652-b2b5-4fe79a6ee23b", "record_id": "flaws_cloudtrail:0000032:6a97af7c-076d-4652-b2b5-4fe79a6ee23b", "row_index": 32, "timestamp": "2018-07-31T14:47:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6a97af7c-076d-4652-b2b5-4fe79a6ee23b", "eventTime": "2018-07-31T14:47:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-b9d570b6d837-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7372a571-23e5-44dc-a5d7-36cc4dea67fa", "record_id": "flaws_cloudtrail:0000033:7372a571-23e5-44dc-a5d7-36cc4dea67fa", "row_index": 33, "timestamp": "2018-07-31T14:47:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7372a571-23e5-44dc-a5d7-36cc4dea67fa", "eventTime": "2018-07-31T14:47:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-765cd04d09ae-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f07ce036-87d2-428a-b16d-384d14c0a724", "record_id": "flaws_cloudtrail:0000034:f07ce036-87d2-428a-b16d-384d14c0a724", "row_index": 34, "timestamp": "2018-07-31T14:47:46Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f07ce036-87d2-428a-b16d-384d14c0a724", "eventTime": "2018-07-31T14:47:46Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abc62dbb-c713-400a-bd93-aba832823b2", "record_id": "flaws_cloudtrail:0000035:abc62dbb-c713-400a-bd93-aba832823b2", "row_index": 35, "timestamp": "2018-07-31T14:47:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abc62dbb-c713-400a-bd93-aba832823b2", "eventTime": "2018-07-31T14:47:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-d8436ef27d49-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39fa3571-9169-420a-92ad-6c537ef94719", "record_id": "flaws_cloudtrail:0000036:39fa3571-9169-420a-92ad-6c537ef94719", "row_index": 36, "timestamp": "2018-07-31T14:47:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39fa3571-9169-420a-92ad-6c537ef94719", "eventTime": "2018-07-31T14:47:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-e36f98ec284a-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f2191bf-90b1-49a4-acb4-080be45320", "record_id": "flaws_cloudtrail:0000037:8f2191bf-90b1-49a4-acb4-080be45320", "row_index": 37, "timestamp": "2018-07-31T14:47:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f2191bf-90b1-49a4-acb4-080be45320", "eventTime": "2018-07-31T14:47:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-da425c3cbd29-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "050a7fc6-fb8c-41b6-8547-24614dc0a449", "record_id": "flaws_cloudtrail:0000038:050a7fc6-fb8c-41b6-8547-24614dc0a449", "row_index": 38, "timestamp": "2018-07-31T14:47:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "050a7fc6-fb8c-41b6-8547-24614dc0a449", "eventTime": "2018-07-31T14:47:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-1e96a2829774-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55a5dc9c-3b5b-4c8e-83b1-c8cb59cfad30", "record_id": "flaws_cloudtrail:0000039:55a5dc9c-3b5b-4c8e-83b1-c8cb59cfad30", "row_index": 39, "timestamp": "2018-07-31T14:47:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55a5dc9c-3b5b-4c8e-83b1-c8cb59cfad30", "eventTime": "2018-07-31T14:47:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-86de777f27a4-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42a655be-58be-4ffc-a35a-5b7bfbe98da2", "record_id": "flaws_cloudtrail:0000040:42a655be-58be-4ffc-a35a-5b7bfbe98da2", "row_index": 40, "timestamp": "2018-07-31T14:47:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42a655be-58be-4ffc-a35a-5b7bfbe98da2", "eventTime": "2018-07-31T14:47:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-1b1e7a17127e-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77f54c0d-a998-464b-9639-3505c7285a4f", "record_id": "flaws_cloudtrail:0000041:77f54c0d-a998-464b-9639-3505c7285a4f", "row_index": 41, "timestamp": "2018-07-31T14:47:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77f54c0d-a998-464b-9639-3505c7285a4f", "eventTime": "2018-07-31T14:47:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-dc0026e0218b-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90e47b74-8a0d-4f23-9071-15207a51", "record_id": "flaws_cloudtrail:0000042:90e47b74-8a0d-4f23-9071-15207a51", "row_index": 42, "timestamp": "2018-07-31T14:47:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90e47b74-8a0d-4f23-9071-15207a51", "eventTime": "2018-07-31T14:47:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-fd6a6d97de3b-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a77987-8763-4570-8a85-220630e8ce56a", "record_id": "flaws_cloudtrail:0000043:9a77987-8763-4570-8a85-220630e8ce56a", "row_index": 43, "timestamp": "2018-07-31T14:47:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a77987-8763-4570-8a85-220630e8ce56a", "eventTime": "2018-07-31T14:47:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-ab6dfae2fd0b-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f466a17b-ff1f-496b-ba30-2c5237c8b27f", "record_id": "flaws_cloudtrail:0000044:f466a17b-ff1f-496b-ba30-2c5237c8b27f", "row_index": 44, "timestamp": "2018-07-31T14:47:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f466a17b-ff1f-496b-ba30-2c5237c8b27f", "eventTime": "2018-07-31T14:47:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-e0a4e79cbd1f-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a3637d3-5b14-4ea4-808a-b09de8ebe0d1", "record_id": "flaws_cloudtrail:0000045:3a3637d3-5b14-4ea4-808a-b09de8ebe0d1", "row_index": 45, "timestamp": "2018-07-31T14:48:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a3637d3-5b14-4ea4-808a-b09de8ebe0d1", "eventTime": "2018-07-31T14:48:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-2433b13d1e95-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b782923fb-b562-4cb9-b78b-395637d67148", "record_id": "flaws_cloudtrail:0000046:b782923fb-b562-4cb9-b78b-395637d67148", "row_index": 46, "timestamp": "2018-07-31T14:48:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b782923fb-b562-4cb9-b78b-395637d67148", "eventTime": "2018-07-31T14:48:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-596c764ee9f6-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67cca989-7376-47c2-8a1d-5c259ac8339e", "record_id": "flaws_cloudtrail:0000047:67cca989-7376-47c2-8a1d-5c259ac8339e", "row_index": 47, "timestamp": "2018-07-31T14:48:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67cca989-7376-47c2-8a1d-5c259ac8339e", "eventTime": "2018-07-31T14:48:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-ff4fc8276c20-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8a977769-4808-4d6c-ad5d-acd92a18f9f9", "record_id": "flaws_cloudtrail:0000048:e8a977769-4808-4d6c-ad5d-acd92a18f9f9", "row_index": 48, "timestamp": "2018-07-31T14:48:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8a977769-4808-4d6c-ad5d-acd92a18f9f9", "eventTime": "2018-07-31T14:48:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-3812cd894d36-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e341fa90-1762-4171-a85d-45e02bf12dd9", "record_id": "flaws_cloudtrail:0000049:e341fa90-1762-4171-a85d-45e02bf12dd9", "row_index": 49, "timestamp": "2018-07-31T14:48:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e341fa90-1762-4171-a85d-45e02bf12dd9", "eventTime": "2018-07-31T14:48:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-c51cec3076ed-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c7c3104-7591-48e0-96e3-9eef273b887d", "record_id": "flaws_cloudtrail:0000050:5c7c3104-7591-48e0-96e3-9eef273b887d", "row_index": 50, "timestamp": "2018-07-31T14:48:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c7c3104-7591-48e0-96e3-9eef273b887d", "eventTime": "2018-07-31T14:48:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-bed622d0f950-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24e178330-9d68-4aa1-b9c9-8e9c0d8bc129", "record_id": "flaws_cloudtrail:0000051:24e178330-9d68-4aa1-b9c9-8e9c0d8bc129", "row_index": 51, "timestamp": "2018-07-31T14:48:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24e178330-9d68-4aa1-b9c9-8e9c0d8bc129", "eventTime": "2018-07-31T14:48:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-4612de6eb394-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f679cde-59fc-4121-97eb-829734f83d80", "record_id": "flaws_cloudtrail:0000052:2f679cde-59fc-4121-97eb-829734f83d80", "row_index": 52, "timestamp": "2018-07-31T14:48:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f679cde-59fc-4121-97eb-829734f83d80", "eventTime": "2018-07-31T14:48:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-8f385dd7d7fd-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6ae1295-18f0-44a2-b696-7a8af16de92f", "record_id": "flaws_cloudtrail:0000053:d6ae1295-18f0-44a2-b696-7a8af16de92f", "row_index": 53, "timestamp": "2018-07-31T14:48:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6ae1295-18f0-44a2-b696-7a8af16de92f", "eventTime": "2018-07-31T14:48:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-9ffb0546a9b1-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bde1cd7b-dba5-4f26-af8e-a8079ac2463e", "record_id": "flaws_cloudtrail:0000054:bde1cd7b-dba5-4f26-af8e-a8079ac2463e", "row_index": 54, "timestamp": "2018-07-31T14:48:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bde1cd7b-dba5-4f26-af8e-a8079ac2463e", "eventTime": "2018-07-31T14:48:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-5bf351471b6e-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d70437b1-869e-4e76-8467-882241cff4ec", "record_id": "flaws_cloudtrail:0000055:d70437b1-869e-4e76-8467-882241cff4ec", "row_index": 55, "timestamp": "2018-07-31T14:48:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d70437b1-869e-4e76-8467-882241cff4ec", "eventTime": "2018-07-31T14:48:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-c7f9cec1e5f5-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ec7de41-a5a3-415b-8d77-329651d", "record_id": "flaws_cloudtrail:0000056:9ec7de41-a5a3-415b-8d77-329651d", "row_index": 56, "timestamp": "2018-07-31T14:48:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ec7de41-a5a3-415b-8d77-329651d", "eventTime": "2018-07-31T14:48:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-78c2ff0a5082-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3df00c1e-1752-4275-b968-3ec258b066965", "record_id": "flaws_cloudtrail:0000057:3df00c1e-1752-4275-b968-3ec258b066965", "row_index": 57, "timestamp": "2018-07-31T14:48:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3df00c1e-1752-4275-b968-3ec258b066965", "eventTime": "2018-07-31T14:48:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-597975438bc0-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21add670-0394-42da-907f-f62a9bb28eda", "record_id": "flaws_cloudtrail:0000058:21add670-0394-42da-907f-f62a9bb28eda", "row_index": 58, "timestamp": "2018-07-31T14:48:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21add670-0394-42da-907f-f62a9bb28eda", "eventTime": "2018-07-31T14:48:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-c0915e66b00c-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dadaa82a-3602-44ed-89e9-57ef1cf07aa7", "record_id": "flaws_cloudtrail:0000059:dadaa82a-3602-44ed-89e9-57ef1cf07aa7", "row_index": 59, "timestamp": "2018-07-31T14:48:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dadaa82a-3602-44ed-89e9-57ef1cf07aa7", "eventTime": "2018-07-31T14:48:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-50ff48b78a12-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "167166ea-c0f3-4c46-ad1f-914bdd444cd0", "record_id": "flaws_cloudtrail:0000060:167166ea-c0f3-4c46-ad1f-914bdd444cd0", "row_index": 60, "timestamp": "2018-07-31T14:48:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "167166ea-c0f3-4c46-ad1f-914bdd444cd0", "eventTime": "2018-07-31T14:48:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-e543f12751e4-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4565bffb-9a9e-4197-a15a-bace8755ec64", "record_id": "flaws_cloudtrail:0000061:4565bffb-9a9e-4197-a15a-bace8755ec64", "row_index": 61, "timestamp": "2018-07-31T14:48:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4565bffb-9a9e-4197-a15a-bace8755ec64", "eventTime": "2018-07-31T14:48:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-8af30e09cf82-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e8dc7b9-739e-4b00-b535-50db02b3e2b9", "record_id": "flaws_cloudtrail:0000062:6e8dc7b9-739e-4b00-b535-50db02b3e2b9", "row_index": 62, "timestamp": "2018-07-31T14:48:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e8dc7b9-739e-4b00-b535-50db02b3e2b9", "eventTime": "2018-07-31T14:48:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-581d82f07c4e-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65cb8b1d-ae0c-4ba6-ab4a-f88871596017", "record_id": "flaws_cloudtrail:0000063:65cb8b1d-ae0c-4ba6-ab4a-f88871596017", "row_index": 63, "timestamp": "2018-07-31T14:48:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65cb8b1d-ae0c-4ba6-ab4a-f88871596017", "eventTime": "2018-07-31T14:48:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-f66088e45c37-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25052c91-9833-4289-84e6-ef9ad53250", "record_id": "flaws_cloudtrail:0000064:25052c91-9833-4289-84e6-ef9ad53250", "row_index": 64, "timestamp": "2018-07-31T14:48:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25052c91-9833-4289-84e6-ef9ad53250", "eventTime": "2018-07-31T14:48:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-b86b274d3f41-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de5cf455-109b-4956-9f8a-67cabe9638b6", "record_id": "flaws_cloudtrail:0000065:de5cf455-109b-4956-9f8a-67cabe9638b6", "row_index": 65, "timestamp": "2018-07-31T14:48:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de5cf455-109b-4956-9f8a-67cabe9638b6", "eventTime": "2018-07-31T14:48:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-0ca208221f79-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9acc0f77-17df-4b91-978e-90ed62af1526", "record_id": "flaws_cloudtrail:0000066:9acc0f77-17df-4b91-978e-90ed62af1526", "row_index": 66, "timestamp": "2018-07-31T14:48:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9acc0f77-17df-4b91-978e-90ed62af1526", "eventTime": "2018-07-31T14:48:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-6f446ff9a374-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "006cf10d-7f4d-4125-8bc5-374f2831f18f", "record_id": "flaws_cloudtrail:0000067:006cf10d-7f4d-4125-8bc5-374f2831f18f", "row_index": 67, "timestamp": "2018-07-31T14:48:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "006cf10d-7f4d-4125-8bc5-374f2831f18f", "eventTime": "2018-07-31T14:48:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-4a68f650e20b-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e526b9f4-7d90-4b51-8364-8cf2c4850dc4", "record_id": "flaws_cloudtrail:0000068:e526b9f4-7d90-4b51-8364-8cf2c4850dc4", "row_index": 68, "timestamp": "2018-07-31T14:48:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e526b9f4-7d90-4b51-8364-8cf2c4850dc4", "eventTime": "2018-07-31T14:48:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-resource-tagger-48f1fcf514c2-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c59446b-39d3-4f1f-b00e-a72ef929e65c", "record_id": "flaws_cloudtrail:0000069:c59446b-39d3-4f1f-b00e-a72ef929e65c", "row_index": 69, "timestamp": "2018-07-31T14:48:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c59446b-39d3-4f1f-b00e-a72ef929e65c", "eventTime": "2018-07-31T14:48:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-website-panoplot-f4ogq", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a136382-ac0b-4f12-9aad-580d02e546ab", "record_id": "flaws_cloudtrail:0000070:a136382-ac0b-4f12-9aad-580d02e546ab", "row_index": 70, "timestamp": "2018-07-31T14:48:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a136382-ac0b-4f12-9aad-580d02e546ab", "eventTime": "2018-07-31T14:48:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "aws-wordpress-bucket-buyit", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a887a6a1-c238-4466-9f6b-ebf6ecb40d11", "record_id": "flaws_cloudtrail:0000071:a887a6a1-c238-4466-9f6b-ebf6ecb40d11", "row_index": 71, "timestamp": "2018-07-31T14:48:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a887a6a1-c238-4466-9f6b-ebf6ecb40d11", "eventTime": "2018-07-31T14:48:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awsconfig-4b05186cdc01-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ffc01a8c-474b-46da-a4b0-3373b8fb1eb5", "record_id": "flaws_cloudtrail:0000072:ffc01a8c-474b-46da-a4b0-3373b8fb1eb5", "row_index": 72, "timestamp": "2018-07-31T14:48:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ffc01a8c-474b-46da-a4b0-3373b8fb1eb5", "eventTime": "2018-07-31T14:48:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awsconfig-1d2c4415f2f5-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9d38155-41fb-4d88-ad57-215cc20f5c6e", "record_id": "flaws_cloudtrail:0000073:c9d38155-41fb-4d88-ad57-215cc20f5c6e", "row_index": 73, "timestamp": "2018-07-31T14:48:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9d38155-41fb-4d88-ad57-215cc20f5c6e", "eventTime": "2018-07-31T14:48:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awslogs-3760cde30827-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "809533d-6fab-4bf0-9b96-83785a69ab0", "record_id": "flaws_cloudtrail:0000074:809533d-6fab-4bf0-9b96-83785a69ab0", "row_index": 74, "timestamp": "2018-07-31T14:48:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "809533d-6fab-4bf0-9b96-83785a69ab0", "eventTime": "2018-07-31T14:48:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awslogs-28f7af401fbc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ab9567b-fbfb-47b5-ab65-bfec798842f", "record_id": "flaws_cloudtrail:0000075:4ab9567b-fbfb-47b5-ab65-bfec798842f", "row_index": 75, "timestamp": "2018-07-31T14:48:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ab9567b-fbfb-47b5-ab65-bfec798842f", "eventTime": "2018-07-31T14:48:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awslogs-28f7af401fbc-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "520fc36b-e74c-4a98-ab9b-d80d48e9565d", "record_id": "flaws_cloudtrail:0000076:520fc36b-e74c-4a98-ab9b-d80d48e9565d", "row_index": 76, "timestamp": "2018-07-31T14:48:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "520fc36b-e74c-4a98-ab9b-d80d48e9565d", "eventTime": "2018-07-31T14:48:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awslogs-us-east-1-762231108481", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26b5f309-d936-476b-8ae0-6988cd029f7e", "record_id": "flaws_cloudtrail:0000077:26b5f309-d936-476b-8ae0-6988cd029f7e", "row_index": 77, "timestamp": "2018-07-31T14:48:41Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 557, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26b5f309-d936-476b-8ae0-6988cd029f7e", "eventTime": "2018-07-31T14:48:41Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb99ab2c-d324-4f61-9e8d-149da94fdc1b", "record_id": "flaws_cloudtrail:0000078:fb99ab2c-d324-4f61-9e8d-149da94fdc1b", "row_index": 78, "timestamp": "2018-07-31T14:48:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb99ab2c-d324-4f61-9e8d-149da94fdc1b", "eventTime": "2018-07-31T14:48:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awsnotifyreqs-awsnotifybucket-13l1sb2ed3xi8", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86d94ba7-3a2e-4af5-ab1f-57530dc8af55", "record_id": "flaws_cloudtrail:0000079:86d94ba7-3a2e-4af5-ab1f-57530dc8af55", "row_index": 79, "timestamp": "2018-07-31T14:48:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86d94ba7-3a2e-4af5-ab1f-57530dc8af55", "eventTime": "2018-07-31T14:48:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awsnotifyreqs-awsnotifybucket-6l7uzkz1ih4z", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d283d65b-ad00-4f88-9439-edf9ce423380", "record_id": "flaws_cloudtrail:0000080:d283d65b-ad00-4f88-9439-edf9ce423380", "row_index": 80, "timestamp": "2018-07-31T14:48:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d283d65b-ad00-4f88-9439-edf9ce423380", "eventTime": "2018-07-31T14:48:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "awsnotifyreqs-awsnotifybucket-a797kj6dfl54", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee7aeffc-f197-4699-bba3-cc81932b124", "record_id": "flaws_cloudtrail:0000081:ee7aeffc-f197-4699-bba3-cc81932b124", "row_index": 81, "timestamp": "2018-07-31T14:48:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee7aeffc-f197-4699-bba3-cc81932b124", "eventTime": "2018-07-31T14:48:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "backup-imagine-processed", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30372-d7a7-4526-a1b3-15ae8e3712b6", "record_id": "flaws_cloudtrail:0000082:30372-d7a7-4526-a1b3-15ae8e3712b6", "row_index": 82, "timestamp": "2018-07-31T14:48:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30372-d7a7-4526-a1b3-15ae8e3712b6", "eventTime": "2018-07-31T14:48:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "backup-imagine-raw", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3b85c16-c20b-4f15-8d48-c93e1cea0c0b", "record_id": "flaws_cloudtrail:0000083:b3b85c16-c20b-4f15-8d48-c93e1cea0c0b", "row_index": 83, "timestamp": "2018-07-31T14:48:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3b85c16-c20b-4f15-8d48-c93e1cea0c0b", "eventTime": "2018-07-31T14:48:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "backups-16b2b9e31c5a-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "372c6358-fa06-4ade-a497-32e0c20dbd5d", "record_id": "flaws_cloudtrail:0000084:372c6358-fa06-4ade-a497-32e0c20dbd5d", "row_index": 84, "timestamp": "2018-07-31T14:48:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "372c6358-fa06-4ade-a497-32e0c20dbd5d", "eventTime": "2018-07-31T14:48:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "backups-15b21a53c9fd-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64b6d0cf-b1b5-42fb-a18f-5177e8a7a02d", "record_id": "flaws_cloudtrail:0000085:64b6d0cf-b1b5-42fb-a18f-5177e8a7a02d", "row_index": 85, "timestamp": "2018-07-31T14:48:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64b6d0cf-b1b5-42fb-a18f-5177e8a7a02d", "eventTime": "2018-07-31T14:48:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bagsorter-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b855dcce-b612-4d78-ac4a-40787e0a7ee5", "record_id": "flaws_cloudtrail:0000086:b855dcce-b612-4d78-ac4a-40787e0a7ee5", "row_index": 86, "timestamp": "2018-07-31T14:48:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b855dcce-b612-4d78-ac4a-40787e0a7ee5", "eventTime": "2018-07-31T14:48:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "barter-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "056f3d09-4e90-4939-83c8-0a43c886a9c9", "record_id": "flaws_cloudtrail:0000087:056f3d09-4e90-4939-83c8-0a43c886a9c9", "row_index": 87, "timestamp": "2018-07-31T14:48:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "056f3d09-4e90-4939-83c8-0a43c886a9c9", "eventTime": "2018-07-31T14:48:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "barter-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b464dba-f24d-4604-bcf2-8ff73b7faa47", "record_id": "flaws_cloudtrail:0000088:7b464dba-f24d-4604-bcf2-8ff73b7faa47", "row_index": 88, "timestamp": "2018-07-31T14:48:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b464dba-f24d-4604-bcf2-8ff73b7faa47", "eventTime": "2018-07-31T14:48:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bastion-longterm-logs-2134dafedbd5", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfead7b1-18be-4a32-a610-72374c710952", "record_id": "flaws_cloudtrail:0000089:cfead7b1-18be-4a32-a610-72374c710952", "row_index": 89, "timestamp": "2018-07-31T14:48:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfead7b1-18be-4a32-a610-72374c710952", "eventTime": "2018-07-31T14:48:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bastion-longterm-logs-09b66e0f6d85", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "010be70d-33fa-41a7-a918-e4f9797e4064", "record_id": "flaws_cloudtrail:0000090:010be70d-33fa-41a7-a918-e4f9797e4064", "row_index": 90, "timestamp": "2018-07-31T14:48:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "010be70d-33fa-41a7-a918-e4f9797e4064", "eventTime": "2018-07-31T14:48:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bastion-longterm-logs-e9bfd32a1073", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e0f4f12-ecc6-4b91-90e0-eb9b2bc99ee9", "record_id": "flaws_cloudtrail:0000091:6e0f4f12-ecc6-4b91-90e0-eb9b2bc99ee9", "row_index": 91, "timestamp": "2018-07-31T14:48:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e0f4f12-ecc6-4b91-90e0-eb9b2bc99ee9", "eventTime": "2018-07-31T14:48:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bastion-longterm-logs-eb8dcad37ebb", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e09dca0e-7501-4b4d-aa78-a4814dc4ccb5", "record_id": "flaws_cloudtrail:0000092:e09dca0e-7501-4b4d-aa78-a4814dc4ccb5", "row_index": 92, "timestamp": "2018-07-31T14:49:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e09dca0e-7501-4b4d-aa78-a4814dc4ccb5", "eventTime": "2018-07-31T14:49:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "biotech-mbt-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "566ed53d-17d6-47eb-b820-8f5f8a3eed1e", "record_id": "flaws_cloudtrail:0000093:566ed53d-17d6-47eb-b820-8f5f8a3eed1e", "row_index": 93, "timestamp": "2018-07-31T14:49:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "566ed53d-17d6-47eb-b820-8f5f8a3eed1e", "eventTime": "2018-07-31T14:49:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "biotech-mbt-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f29aa07-cf2d-48ca-b828-10d204df6896", "record_id": "flaws_cloudtrail:0000094:4f29aa07-cf2d-48ca-b828-10d204df6896", "row_index": 94, "timestamp": "2018-07-31T14:49:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f29aa07-cf2d-48ca-b828-10d204df6896", "eventTime": "2018-07-31T14:49:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "biotech-sandbox-s3-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1a9e25e-8ba6-4268-ad07-342ea49f77a9", "record_id": "flaws_cloudtrail:0000095:d1a9e25e-8ba6-4268-ad07-342ea49f77a9", "row_index": 95, "timestamp": "2018-07-31T14:49:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1a9e25e-8ba6-4268-ad07-342ea49f77a9", "eventTime": "2018-07-31T14:49:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "biotech-sandbox-s3-west-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dfbbfbc-f933-4203-817d-69eac27ec72f", "record_id": "flaws_cloudtrail:0000096:3dfbbfbc-f933-4203-817d-69eac27ec72f", "row_index": 96, "timestamp": "2018-07-31T14:49:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dfbbfbc-f933-4203-817d-69eac27ec72f", "eventTime": "2018-07-31T14:49:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "biotech-us-east-1-091522364275", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ee606f-866d-4a04-9732-a4b8374fffb5", "record_id": "flaws_cloudtrail:0000097:c6ee606f-866d-4a04-9732-a4b8374fffb5", "row_index": 97, "timestamp": "2018-07-31T14:49:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ee606f-866d-4a04-9732-a4b8374fffb5", "eventTime": "2018-07-31T14:49:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "biotechlims-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73107fbf-8883-4b26-91fe-916b3e6765f4", "record_id": "flaws_cloudtrail:0000098:73107fbf-8883-4b26-91fe-916b3e6765f4", "row_index": 98, "timestamp": "2018-07-31T14:49:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73107fbf-8883-4b26-91fe-916b3e6765f4", "eventTime": "2018-07-31T14:49:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "biotechlims-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8708b98c-f0c6-4657-b229-e7446b9cf768", "record_id": "flaws_cloudtrail:0000099:8708b98c-f0c6-4657-b229-e7446b9cf768", "row_index": 99, "timestamp": "2018-07-31T14:49:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8708b98c-f0c6-4657-b229-e7446b9cf768", "eventTime": "2018-07-31T14:49:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bkrodg-test-bucket", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a10003-a9cd-470b-ab9a-e2f9a80006d3", "record_id": "flaws_cloudtrail:0000100:a10003-a9cd-470b-ab9a-e2f9a80006d3", "row_index": 100, "timestamp": "2018-07-31T14:49:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a10003-a9cd-470b-ab9a-e2f9a80006d3", "eventTime": "2018-07-31T14:49:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "blobstore-issue-exported-vpcflow-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2324a2f5-99e2-4b5d-89d5-c6460b5bc256", "record_id": "flaws_cloudtrail:0000101:2324a2f5-99e2-4b5d-89d5-c6460b5bc256", "row_index": 101, "timestamp": "2018-07-31T14:49:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2324a2f5-99e2-4b5d-89d5-c6460b5bc256", "eventTime": "2018-07-31T14:49:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bluebird-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89a0d54c-cdb5-4340-9b70-36c9ee95ca62", "record_id": "flaws_cloudtrail:0000102:89a0d54c-cdb5-4340-9b70-36c9ee95ca62", "row_index": 102, "timestamp": "2018-07-31T14:49:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89a0d54c-cdb5-4340-9b70-36c9ee95ca62", "eventTime": "2018-07-31T14:49:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "branding-slalom-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d405791e7-0e38-48b7-8a6e-a855aa2892b1", "record_id": "flaws_cloudtrail:0000103:d405791e7-0e38-48b7-8a6e-a855aa2892b1", "row_index": 103, "timestamp": "2018-07-31T14:49:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d405791e7-0e38-48b7-8a6e-a855aa2892b1", "eventTime": "2018-07-31T14:49:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "branding-slalom-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04d334e3-73b3-4836-a540-190e7f35900", "record_id": "flaws_cloudtrail:0000104:04d334e3-73b3-4836-a540-190e7f35900", "row_index": 104, "timestamp": "2018-07-31T14:49:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04d334e3-73b3-4836-a540-190e7f35900", "eventTime": "2018-07-31T14:49:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "brazil-value-capture-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21aa5749-a813-489a-b642-393e589878df", "record_id": "flaws_cloudtrail:0000105:21aa5749-a813-489a-b642-393e589878df", "row_index": 105, "timestamp": "2018-07-31T14:49:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21aa5749-a813-489a-b642-393e589878df", "eventTime": "2018-07-31T14:49:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-ae-seedops", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f273daa-22ce-4f6e-b0a5-1a75e34571f", "record_id": "flaws_cloudtrail:0000106:8f273daa-22ce-4f6e-b0a5-1a75e34571f", "row_index": 106, "timestamp": "2018-07-31T14:49:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f273daa-22ce-4f6e-b0a5-1a75e34571f", "eventTime": "2018-07-31T14:49:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-ae-seedops-bkup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6eef1c8-1268-4888-82e5-009882bda2df", "record_id": "flaws_cloudtrail:0000107:d6eef1c8-1268-4888-82e5-009882bda2df", "row_index": 107, "timestamp": "2018-07-31T14:49:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6eef1c8-1268-4888-82e5-009882bda2df", "eventTime": "2018-07-31T14:49:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-analytics", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "850a9c26-678c-4782-a8e1-a0aa2fa47ebe", "record_id": "flaws_cloudtrail:0000108:850a9c26-678c-4782-a8e1-a0aa2fa47ebe", "row_index": 108, "timestamp": "2018-07-31T14:49:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "850a9c26-678c-4782-a8e1-a0aa2fa47ebe", "eventTime": "2018-07-31T14:49:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-analytics-gws", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10b65534-b92d-438d-937f-4055af349ded", "record_id": "flaws_cloudtrail:0000109:10b65534-b92d-438d-937f-4055af349ded", "row_index": 109, "timestamp": "2018-07-31T14:49:22Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 557, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10b65534-b92d-438d-937f-4055af349ded", "eventTime": "2018-07-31T14:49:22Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4871b205-ae96-4871-aa96-432b391534cd8", "record_id": "flaws_cloudtrail:0000110:4871b205-ae96-4871-aa96-432b391534cd8", "row_index": 110, "timestamp": "2018-07-31T14:49:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4871b205-ae96-4871-aa96-432b391534cd8", "eventTime": "2018-07-31T14:49:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-analytics-gws-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e7e4bb5-abe6-4988-937d-819fec8f780d", "record_id": "flaws_cloudtrail:0000111:8e7e4bb5-abe6-4988-937d-819fec8f780d", "row_index": 111, "timestamp": "2018-07-31T14:49:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e7e4bb5-abe6-4988-937d-819fec8f780d", "eventTime": "2018-07-31T14:49:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-clouddocs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df42b806-2366-4609-8e31-3cd886c4a1f6", "record_id": "flaws_cloudtrail:0000112:df42b806-2366-4609-8e31-3cd886c4a1f6", "row_index": 112, "timestamp": "2018-07-31T14:49:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df42b806-2366-4609-8e31-3cd886c4a1f6", "eventTime": "2018-07-31T14:49:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "416c2272-8929-476f-962a-f13f1351fcd4", "record_id": "flaws_cloudtrail:0000113:416c2272-8929-476f-962a-f13f1351fcd4", "row_index": 113, "timestamp": "2018-07-31T14:49:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "416c2272-8929-476f-962a-f13f1351fcd4", "eventTime": "2018-07-31T14:49:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-digital-phenomics", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d74e3bd-599a-4956-ac76-3ac046204c44", "record_id": "flaws_cloudtrail:0000114:9d74e3bd-599a-4956-ac76-3ac046204c44", "row_index": 114, "timestamp": "2018-07-31T14:49:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d74e3bd-599a-4956-ac76-3ac046204c44", "eventTime": "2018-07-31T14:49:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-next-placement", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2e133eb-93df-46d4-a99e-247413344107", "record_id": "flaws_cloudtrail:0000115:d2e133eb-93df-46d4-a99e-247413344107", "row_index": 115, "timestamp": "2018-07-31T14:49:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2e133eb-93df-46d4-a99e-247413344107", "eventTime": "2018-07-31T14:49:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "245eef77-6fae-44c1-a127-7a8f03f89748", "record_id": "flaws_cloudtrail:0000116:245eef77-6fae-44c1-a127-7a8f03f89748", "row_index": 116, "timestamp": "2018-07-31T14:49:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "245eef77-6fae-44c1-a127-7a8f03f89748", "eventTime": "2018-07-31T14:49:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-np-int-data-9491081cd04b", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dad5487-adca-4b76-9868-80e3224ff1c7", "record_id": "flaws_cloudtrail:0000117:3dad5487-adca-4b76-9868-80e3224ff1c7", "row_index": 117, "timestamp": "2018-07-31T14:49:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dad5487-adca-4b76-9868-80e3224ff1c7", "eventTime": "2018-07-31T14:49:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-np-kafka-gg-stream-84fee5abe952", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20f1f4a0-4968-4ca9-93f2-c8233f038f9c", "record_id": "flaws_cloudtrail:0000118:20f1f4a0-4968-4ca9-93f2-c8233f038f9c", "row_index": 118, "timestamp": "2018-07-31T14:49:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20f1f4a0-4968-4ca9-93f2-c8233f038f9c", "eventTime": "2018-07-31T14:49:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-np-raw-data-9d2471a88748", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bb197890-3a58-4d10-82f5-e27cf347a8c6", "record_id": "flaws_cloudtrail:0000119:4bb197890-3a58-4d10-82f5-e27cf347a8c6", "row_index": 119, "timestamp": "2018-07-31T14:49:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bb197890-3a58-4d10-82f5-e27cf347a8c6", "eventTime": "2018-07-31T14:49:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-np-redshift-data-eaddb426a4a1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "118a1031-5db9-4165-ba1c-71a101f95010", "record_id": "flaws_cloudtrail:0000120:118a1031-5db9-4165-ba1c-71a101f95010", "row_index": 120, "timestamp": "2018-07-31T14:49:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "118a1031-5db9-4165-ba1c-71a101f95010", "eventTime": "2018-07-31T14:49:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-perm-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53f796df-6e7b-441f-abe4-0a9ce8fb1808", "record_id": "flaws_cloudtrail:0000121:53f796df-6e7b-441f-abe4-0a9ce8fb1808", "row_index": 121, "timestamp": "2018-07-31T14:49:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53f796df-6e7b-441f-abe4-0a9ce8fb1808", "eventTime": "2018-07-31T14:49:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-platform-genomics", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0be44887-d35d-421c-9024-1ae46a394a09", "record_id": "flaws_cloudtrail:0000122:0be44887-d35d-421c-9024-1ae46a394a09", "row_index": 122, "timestamp": "2018-07-31T14:49:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0be44887-d35d-421c-9024-1ae46a394a09", "eventTime": "2018-07-31T14:49:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-platform-operations-inventory", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d0f2450-82b4-4a25-8f38-86d0f1baf773", "record_id": "flaws_cloudtrail:0000123:1d0f2450-82b4-4a25-8f38-86d0f1baf773", "row_index": 123, "timestamp": "2018-07-31T14:49:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d0f2450-82b4-4a25-8f38-86d0f1baf773", "eventTime": "2018-07-31T14:49:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-platform-phenomics", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7199cba8-97f5-4372-9556-f75a86f083ff", "record_id": "flaws_cloudtrail:0000124:7199cba8-97f5-4372-9556-f75a86f083ff", "row_index": 124, "timestamp": "2018-07-31T14:49:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7199cba8-97f5-4372-9556-f75a86f083ff", "eventTime": "2018-07-31T14:49:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-platform-pipeline-management", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ad9bbaa-b7a3-4771-ab94-597b09dfd27f", "record_id": "flaws_cloudtrail:0000125:8ad9bbaa-b7a3-4771-ab94-597b09dfd27f", "row_index": 125, "timestamp": "2018-07-31T14:49:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ad9bbaa-b7a3-4771-ab94-597b09dfd27f", "eventTime": "2018-07-31T14:49:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3a089635-439d-4812-b25f-c65689631416", "record_id": "flaws_cloudtrail:0000126:d3a089635-439d-4812-b25f-c65689631416", "row_index": 126, "timestamp": "2018-07-31T14:49:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3a089635-439d-4812-b25f-c65689631416", "eventTime": "2018-07-31T14:49:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-prod-ap-southeast-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600bc0fc-f1ac-430e-860e-3c72f2a2b63f", "record_id": "flaws_cloudtrail:0000127:600bc0fc-f1ac-430e-860e-3c72f2a2b63f", "row_index": 127, "timestamp": "2018-07-31T14:49:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600bc0fc-f1ac-430e-860e-3c72f2a2b63f", "eventTime": "2018-07-31T14:49:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-prod-eu-west-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c0fefd7-1a21-4cd7-bcb9-307a3fb5ed14", "record_id": "flaws_cloudtrail:0000128:4c0fefd7-1a21-4cd7-bcb9-307a3fb5ed14", "row_index": 128, "timestamp": "2018-07-31T14:49:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c0fefd7-1a21-4cd7-bcb9-307a3fb5ed14", "eventTime": "2018-07-31T14:49:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-prod-int-data-fb8c3e4ebcca", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93d2e8f3-c6ec-4756-95ea-f5a9b5e65771", "record_id": "flaws_cloudtrail:0000129:93d2e8f3-c6ec-4756-95ea-f5a9b5e65771", "row_index": 129, "timestamp": "2018-07-31T14:49:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93d2e8f3-c6ec-4756-95ea-f5a9b5e65771", "eventTime": "2018-07-31T14:49:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-prod-kafka-gg-stream-315e9d20079c", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb8e070e-f745-49f2-8e34-021d7941ac10", "record_id": "flaws_cloudtrail:0000130:fb8e070e-f745-49f2-8e34-021d7941ac10", "row_index": 130, "timestamp": "2018-07-31T14:49:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb8e070e-f745-49f2-8e34-021d7941ac10", "eventTime": "2018-07-31T14:49:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-prod-visualization-ee0153ae38ca", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "847e7b61-6c01-4dbf-b113-ce950639ede", "record_id": "flaws_cloudtrail:0000131:847e7b61-6c01-4dbf-b113-ce950639ede", "row_index": 131, "timestamp": "2018-07-31T14:49:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "847e7b61-6c01-4dbf-b113-ce950639ede", "eventTime": "2018-07-31T14:49:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-sas-bulps-2017", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88f0ab60-fe80-4040-b1b8-d6fcccc637cd", "record_id": "flaws_cloudtrail:0000132:88f0ab60-fe80-4040-b1b8-d6fcccc637cd", "row_index": 132, "timestamp": "2018-07-31T14:49:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88f0ab60-fe80-4040-b1b8-d6fcccc637cd", "eventTime": "2018-07-31T14:49:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c73d934-196a-4959-8099-f35cdb167057c", "record_id": "flaws_cloudtrail:0000133:0c73d934-196a-4959-8099-f35cdb167057c", "row_index": 133, "timestamp": "2018-07-31T14:49:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c73d934-196a-4959-8099-f35cdb167057c", "eventTime": "2018-07-31T14:49:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space-ap-southeast-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e39c113-94ac-4074-bc79-3688c7d19e9b", "record_id": "flaws_cloudtrail:0000134:3e39c113-94ac-4074-bc79-3688c7d19e9b", "row_index": 134, "timestamp": "2018-07-31T14:49:59Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 560, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e39c113-94ac-4074-bc79-3688c7d19e9b", "eventTime": "2018-07-31T14:49:59Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "08573bef-57bd-4bf2-8bd8-e9f9c12fd34f", "record_id": "flaws_cloudtrail:0000135:08573bef-57bd-4bf2-8bd8-e9f9c12fd34f", "row_index": 135, "timestamp": "2018-07-31T14:50:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "08573bef-57bd-4bf2-8bd8-e9f9c12fd34f", "eventTime": "2018-07-31T14:50:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space-ap-southeast-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9131a333-03e1-453f-a3f0-368cc029128", "record_id": "flaws_cloudtrail:0000136:9131a333-03e1-453f-a3f0-368cc029128", "row_index": 136, "timestamp": "2018-07-31T14:50:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9131a333-03e1-453f-a3f0-368cc029128", "eventTime": "2018-07-31T14:50:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space-ca-central-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "152ff0bc-0799-4ccd-af57-48a11f0a3c1d", "record_id": "flaws_cloudtrail:0000137:152ff0bc-0799-4ccd-af57-48a11f0a3c1d", "row_index": 137, "timestamp": "2018-07-31T14:50:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "152ff0bc-0799-4ccd-af57-48a11f0a3c1d", "eventTime": "2018-07-31T14:50:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space-eu-west-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "065861be-edf9-4fed-807f-945b7e0539f8", "record_id": "flaws_cloudtrail:0000138:065861be-edf9-4fed-807f-945b7e0539f8", "row_index": 138, "timestamp": "2018-07-31T14:50:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "065861be-edf9-4fed-807f-945b7e0539f8", "eventTime": "2018-07-31T14:50:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space-eu-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7dcff895-7d95-4191-b217-5441dee889bf", "record_id": "flaws_cloudtrail:0000139:7dcff895-7d95-4191-b217-5441dee889bf", "row_index": 139, "timestamp": "2018-07-31T14:50:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7dcff895-7d95-4191-b217-5441dee889bf", "eventTime": "2018-07-31T14:50:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55e57adb-cddb-4e83-90b2-4ca73704a12", "record_id": "flaws_cloudtrail:0000140:55e57adb-cddb-4e83-90b2-4ca73704a12", "row_index": 140, "timestamp": "2018-07-31T14:50:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55e57adb-cddb-4e83-90b2-4ca73704a12", "eventTime": "2018-07-31T14:50:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space-us-west-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ddb3a0e-0cfa-40f7-a967-6f243adf7b67", "record_id": "flaws_cloudtrail:0000141:6ddb3a0e-0cfa-40f7-a967-6f243adf7b67", "row_index": 141, "timestamp": "2018-07-31T14:50:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ddb3a0e-0cfa-40f7-a967-6f243adf7b67", "eventTime": "2018-07-31T14:50:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-scratch-space-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f1daa20-2acf-415a-ad09-677722a5c03", "record_id": "flaws_cloudtrail:0000142:0f1daa20-2acf-415a-ad09-677722a5c03", "row_index": 142, "timestamp": "2018-07-31T14:50:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f1daa20-2acf-415a-ad09-677722a5c03", "eventTime": "2018-07-31T14:50:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e61071ae-dddd-47fe-a155-806926822224", "record_id": "flaws_cloudtrail:0000143:e61071ae-dddd-47fe-a155-806926822224", "row_index": 143, "timestamp": "2018-07-31T14:50:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e61071ae-dddd-47fe-a155-806926822224", "eventTime": "2018-07-31T14:50:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa3654be-0e5b-4723-b617-2f7c59c21a5c", "record_id": "flaws_cloudtrail:0000144:fa3654be-0e5b-4723-b617-2f7c59c21a5c", "row_index": 144, "timestamp": "2018-07-31T14:50:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa3654be-0e5b-4723-b617-2f7c59c21a5c", "eventTime": "2018-07-31T14:50:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breeding-visualization", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae4a0ecb-0d58-4234-bc54-7bdab94c0f5d", "record_id": "flaws_cloudtrail:0000145:ae4a0ecb-0d58-4234-bc54-7bdab94c0f5d", "row_index": 145, "timestamp": "2018-07-31T14:50:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae4a0ecb-0d58-4234-bc54-7bdab94c0f5d", "eventTime": "2018-07-31T14:50:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breedingAnalyticsOR-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69529b-a0e9-43cb-b9bd-5703977256e7", "record_id": "flaws_cloudtrail:0000146:69529b-a0e9-43cb-b9bd-5703977256e7", "row_index": 146, "timestamp": "2018-07-31T14:50:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69529b-a0e9-43cb-b9bd-5703977256e7", "eventTime": "2018-07-31T14:50:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breedingAnalyticsOR-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e4bfa63-34a7-4c95-82e8-ad400c52e140", "record_id": "flaws_cloudtrail:0000147:5e4bfa63-34a7-4c95-82e8-ad400c52e140", "row_index": 147, "timestamp": "2018-07-31T14:50:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e4bfa63-34a7-4c95-82e8-ad400c52e140", "eventTime": "2018-07-31T14:50:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "breedingit-cloudtrail-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "142388-5ba7-4375-aa0e-7e83e90ee909", "record_id": "flaws_cloudtrail:0000148:142388-5ba7-4375-aa0e-7e83e90ee909", "row_index": 148, "timestamp": "2018-07-31T14:50:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "142388-5ba7-4375-aa0e-7e83e90ee909", "eventTime": "2018-07-31T14:50:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bsquared-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1de5113f-d3d0-4a2d-9afa-f6e63404d0f8", "record_id": "flaws_cloudtrail:0000149:1de5113f-d3d0-4a2d-9afa-f6e63404d0f8", "row_index": 149, "timestamp": "2018-07-31T14:50:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1de5113f-d3d0-4a2d-9afa-f6e63404d0f8", "eventTime": "2018-07-31T14:50:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bsquared-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98b01d8e-7be9-4d54-aab9-3ca315b3db4d", "record_id": "flaws_cloudtrail:0000150:98b01d8e-7be9-4d54-aab9-3ca315b3db4d", "row_index": 150, "timestamp": "2018-07-31T14:50:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98b01d8e-7be9-4d54-aab9-3ca315b3db4d", "eventTime": "2018-07-31T14:50:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bullseye-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c0633a0-7dbb-413c-9601-2053d24d3f4e", "record_id": "flaws_cloudtrail:0000151:5c0633a0-7dbb-413c-9601-2053d24d3f4e", "row_index": 151, "timestamp": "2018-07-31T14:50:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c0633a0-7dbb-413c-9601-2053d24d3f4e", "eventTime": "2018-07-31T14:50:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "bullseye-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0dcfc3d-6e33-4d17-9f4c-6a5980ee076d", "record_id": "flaws_cloudtrail:0000152:b0dcfc3d-6e33-4d17-9f4c-6a5980ee076d", "row_index": 152, "timestamp": "2018-07-31T14:50:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0dcfc3d-6e33-4d17-9f4c-6a5980ee076d", "eventTime": "2018-07-31T14:50:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "c360-test-bucket", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e02bc39e-0f5e-41f6-ba47-4bd8ff2a0d3c", "record_id": "flaws_cloudtrail:0000153:e02bc39e-0f5e-41f6-ba47-4bd8ff2a0d3c", "row_index": 153, "timestamp": "2018-07-31T14:50:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e02bc39e-0f5e-41f6-ba47-4bd8ff2a0d3c", "eventTime": "2018-07-31T14:50:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cam360-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21da32df-f2ab-439f-a291-20ef8308309b", "record_id": "flaws_cloudtrail:0000154:21da32df-f2ab-439f-a291-20ef8308309b", "row_index": 154, "timestamp": "2018-07-31T14:50:35Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 558, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21da32df-f2ab-439f-a291-20ef8308309b", "eventTime": "2018-07-31T14:50:35Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3c4dd2a-7523-4df8-85b7-d1c0b9919f27", "record_id": "flaws_cloudtrail:0000155:d3c4dd2a-7523-4df8-85b7-d1c0b9919f27", "row_index": 155, "timestamp": "2018-07-31T14:50:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3c4dd2a-7523-4df8-85b7-d1c0b9919f27", "eventTime": "2018-07-31T14:50:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cam360-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1709d42-a63c-4550-bf0d-a0666b508511", "record_id": "flaws_cloudtrail:0000156:f1709d42-a63c-4550-bf0d-a0666b508511", "row_index": 156, "timestamp": "2018-07-31T14:50:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1709d42-a63c-4550-bf0d-a0666b508511", "eventTime": "2018-07-31T14:50:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cassette-planning", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29bab656-3277-4535-8197-6d0d346503e", "record_id": "flaws_cloudtrail:0000157:29bab656-3277-4535-8197-6d0d346503e", "row_index": 157, "timestamp": "2018-07-31T14:50:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29bab656-3277-4535-8197-6d0d346503e", "eventTime": "2018-07-31T14:50:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cdh-backups", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73d955a7-0030-4f27-ae63-42b3e28f8610", "record_id": "flaws_cloudtrail:0000158:73d955a7-0030-4f27-ae63-42b3e28f8610", "row_index": 158, "timestamp": "2018-07-31T14:50:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73d955a7-0030-4f27-ae63-42b3e28f8610", "eventTime": "2018-07-31T14:50:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cdls-30m", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c250af1-af88-4b09-bf5e-9a2a38834d73", "record_id": "flaws_cloudtrail:0000159:3c250af1-af88-4b09-bf5e-9a2a38834d73", "row_index": 159, "timestamp": "2018-07-31T14:50:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c250af1-af88-4b09-bf5e-9a2a38834d73", "eventTime": "2018-07-31T14:50:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "central-buckets-logging", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6706e533-63a4-4d9f-a562-51508d1c26c0", "record_id": "flaws_cloudtrail:0000160:6706e533-63a4-4d9f-a562-51508d1c26c0", "row_index": 160, "timestamp": "2018-07-31T14:50:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6706e533-63a4-4d9f-a562-51508d1c26c0", "eventTime": "2018-07-31T14:50:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "central-buckets-logging-mumbai", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d822d686-4905-4646-9cc8-2da2e28e11db", "record_id": "flaws_cloudtrail:0000161:d822d686-4905-4646-9cc8-2da2e28e11db", "row_index": 161, "timestamp": "2018-07-31T14:50:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d822d686-4905-4646-9cc8-2da2e28e11db", "eventTime": "2018-07-31T14:50:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "central-buckets-logging-oregon", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03c4669f-93d1-43aa-86a4-78563b197970f", "record_id": "flaws_cloudtrail:0000162:03c4669f-93d1-43aa-86a4-78563b197970f", "row_index": 162, "timestamp": "2018-07-31T14:50:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03c4669f-93d1-43aa-86a4-78563b197970f", "eventTime": "2018-07-31T14:50:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "central-buckets-logging-singapore", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3f2a60f-2dff-49b0-86a6-67ef1878e215", "record_id": "flaws_cloudtrail:0000163:b3f2a60f-2dff-49b0-86a6-67ef1878e215", "row_index": 163, "timestamp": "2018-07-31T14:50:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3f2a60f-2dff-49b0-86a6-67ef1878e215", "eventTime": "2018-07-31T14:50:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-aem-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d41acbd5-ee49-45fd-9982-3b3d5c3da00b", "record_id": "flaws_cloudtrail:0000164:d41acbd5-ee49-45fd-9982-3b3d5c3da00b", "row_index": 164, "timestamp": "2018-07-31T14:50:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d41acbd5-ee49-45fd-9982-3b3d5c3da00b", "eventTime": "2018-07-31T14:50:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-aem-emails", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f1f4e9d-affb-48e3-85f5-ad622ce1ff2b", "record_id": "flaws_cloudtrail:0000165:9f1f4e9d-affb-48e3-85f5-ad622ce1ff2b", "row_index": 165, "timestamp": "2018-07-31T14:50:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f1f4e9d-affb-48e3-85f5-ad622ce1ff2b", "eventTime": "2018-07-31T14:50:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-aem-emails-jsonparsing", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00604c66-bb04-4c90-8a24-4fe3e4d520e8", "record_id": "flaws_cloudtrail:0000166:00604c66-bb04-4c90-8a24-4fe3e4d520e8", "row_index": 166, "timestamp": "2018-07-31T14:50:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00604c66-bb04-4c90-8a24-4fe3e4d520e8", "eventTime": "2018-07-31T14:50:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-aem-emails2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e884c9fa-7ed3-403a-883d-7db12d86bce9", "record_id": "flaws_cloudtrail:0000167:e884c9fa-7ed3-403a-883d-7db12d86bce9", "row_index": 167, "timestamp": "2018-07-31T14:50:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e884c9fa-7ed3-403a-883d-7db12d86bce9", "eventTime": "2018-07-31T14:50:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-codepipeline-us-east-1-592456306282", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c083ebd-1f26-4bd7-9c5d-188a8eabbab8", "record_id": "flaws_cloudtrail:0000168:6c083ebd-1f26-4bd7-9c5d-188a8eabbab8", "row_index": 168, "timestamp": "2018-07-31T14:50:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c083ebd-1f26-4bd7-9c5d-188a8eabbab8", "eventTime": "2018-07-31T14:50:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-codepipeline-us-east-1-540211969663", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81b1c324-0473-47ef-adf4-fb97354", "record_id": "flaws_cloudtrail:0000169:81b1c324-0473-47ef-adf4-fb97354", "row_index": 169, "timestamp": "2018-07-31T14:51:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81b1c324-0473-47ef-adf4-fb97354", "eventTime": "2018-07-31T14:51:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-documentation-us-east-1-540211969663", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daad3eef-9596-4a36-b193-1c2d3f1c69fd", "record_id": "flaws_cloudtrail:0000170:daad3eef-9596-4a36-b193-1c2d3f1c69fd", "row_index": 170, "timestamp": "2018-07-31T14:51:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daad3eef-9596-4a36-b193-1c2d3f1c69fd", "eventTime": "2018-07-31T14:51:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-hub-repository-a127c7ec8f96", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02ab8d7f-fe32-417a-9ddb-9ae2263f0373", "record_id": "flaws_cloudtrail:0000171:02ab8d7f-fe32-417a-9ddb-9ae2263f0373", "row_index": 171, "timestamp": "2018-07-31T14:51:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02ab8d7f-fe32-417a-9ddb-9ae2263f0373", "eventTime": "2018-07-31T14:51:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-logging-us-east-1-592456306282", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eca1c744-dc5a-45a2-bd04-3599ddd75a54", "record_id": "flaws_cloudtrail:0000172:eca1c744-dc5a-45a2-bd04-3599ddd75a54", "row_index": 172, "timestamp": "2018-07-31T14:51:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eca1c744-dc5a-45a2-bd04-3599ddd75a54", "eventTime": "2018-07-31T14:51:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-logging-us-east-1-540211969663", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "418106d9a-033f-441d-b636-b8adff500ece", "record_id": "flaws_cloudtrail:0000173:418106d9a-033f-441d-b636-b8adff500ece", "row_index": 173, "timestamp": "2018-07-31T14:51:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "418106d9a-033f-441d-b636-b8adff500ece", "eventTime": "2018-07-31T14:51:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-resources-us-east-1-592456306282", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90cd07c5-51cf-4401-b125-2e918effb1a3", "record_id": "flaws_cloudtrail:0000174:90cd07c5-51cf-4401-b125-2e918effb1a3", "row_index": 174, "timestamp": "2018-07-31T14:51:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90cd07c5-51cf-4401-b125-2e918effb1a3", "eventTime": "2018-07-31T14:51:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-resources-us-east-1-540211969663", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9bd2ec21-4c8d-4883-b48c-64b9d981460c", "record_id": "flaws_cloudtrail:0000175:9bd2ec21-4c8d-4883-b48c-64b9d981460c", "row_index": 175, "timestamp": "2018-07-31T14:51:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9bd2ec21-4c8d-4883-b48c-64b9d981460c", "eventTime": "2018-07-31T14:51:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cep-sap-hybris-us-east-1-540211969663", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f330eb2c-d6e1-4594-8ef4-952ecff26cf4", "record_id": "flaws_cloudtrail:0000176:f330eb2c-d6e1-4594-8ef4-952ecff26cf4", "row_index": 176, "timestamp": "2018-07-31T14:51:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f330eb2c-d6e1-4594-8ef4-952ecff26cf4", "eventTime": "2018-07-31T14:51:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-bosh", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df0c7e29-eb84-4fa2-8167-31431fa3ac7", "record_id": "flaws_cloudtrail:0000177:df0c7e29-eb84-4fa2-8167-31431fa3ac7", "row_index": 177, "timestamp": "2018-07-31T14:51:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df0c7e29-eb84-4fa2-8167-31431fa3ac7", "eventTime": "2018-07-31T14:51:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-bosh-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45011d0b-34c9-4c1b-bb24-b51159a966fd", "record_id": "flaws_cloudtrail:0000178:45011d0b-34c9-4c1b-bb24-b51159a966fd", "row_index": 178, "timestamp": "2018-07-31T14:51:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45011d0b-34c9-4c1b-bb24-b51159a966fd", "eventTime": "2018-07-31T14:51:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-buildpacks", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d61d403d-49d1-4b4e-8f70-cc3d4ba6e4ac", "record_id": "flaws_cloudtrail:0000179:d61d403d-49d1-4b4e-8f70-cc3d4ba6e4ac", "row_index": 179, "timestamp": "2018-07-31T14:51:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d61d403d-49d1-4b4e-8f70-cc3d4ba6e4ac", "eventTime": "2018-07-31T14:51:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-buildpacks-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a240895a0-aaa5-4310-859e-6270b0f64c14", "record_id": "flaws_cloudtrail:0000180:a240895a0-aaa5-4310-859e-6270b0f64c14", "row_index": 180, "timestamp": "2018-07-31T14:51:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a240895a0-aaa5-4310-859e-6270b0f64c14", "eventTime": "2018-07-31T14:51:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-droplets", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3ecff5f-ebcf-4884-9e28-2249f7055bfa", "record_id": "flaws_cloudtrail:0000181:d3ecff5f-ebcf-4884-9e28-2249f7055bfa", "row_index": 181, "timestamp": "2018-07-31T14:51:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3ecff5f-ebcf-4884-9e28-2249f7055bfa", "eventTime": "2018-07-31T14:51:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-droplets-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "628e1030-97c2-4ce3-9b65-d353662b35a0", "record_id": "flaws_cloudtrail:0000182:628e1030-97c2-4ce3-9b65-d353662b35a0", "row_index": 182, "timestamp": "2018-07-31T14:51:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "628e1030-97c2-4ce3-9b65-d353662b35a0", "eventTime": "2018-07-31T14:51:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-packages", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79f4f9ad-3d69-4f78-b482-decd7ccc2ce6", "record_id": "flaws_cloudtrail:0000183:79f4f9ad-3d69-4f78-b482-decd7ccc2ce6", "row_index": 183, "timestamp": "2018-07-31T14:51:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79f4f9ad-3d69-4f78-b482-decd7ccc2ce6", "eventTime": "2018-07-31T14:51:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-packages-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "642210cce-c3cc-49c2-829e-0fc893c5de19", "record_id": "flaws_cloudtrail:0000184:642210cce-c3cc-49c2-829e-0fc893c5de19", "row_index": 184, "timestamp": "2018-07-31T14:51:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "642210cce-c3cc-49c2-829e-0fc893c5de19", "eventTime": "2018-07-31T14:51:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-cnb-resources", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6269f28-a891-4a35-94e2-cbb3cb94e580", "record_id": "flaws_cloudtrail:0000185:b6269f28-a891-4a35-94e2-cbb3cb94e580", "row_index": 185, "timestamp": "2018-07-31T14:51:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6269f28-a891-4a35-94e2-cbb3cb94e580", "eventTime": "2018-07-31T14:51:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-11nddn80la234-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f14719a-e618-4f8b-9514-acd1856c40f6", "record_id": "flaws_cloudtrail:0000186:f14719a-e618-4f8b-9514-acd1856c40f6", "row_index": 186, "timestamp": "2018-07-31T14:51:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f14719a-e618-4f8b-9514-acd1856c40f6", "eventTime": "2018-07-31T14:51:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-19g3iyj1tncos-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8ffbbda-9480-4295-97c1-5c47651ec46", "record_id": "flaws_cloudtrail:0000187:c8ffbbda-9480-4295-97c1-5c47651ec46", "row_index": 187, "timestamp": "2018-07-31T14:51:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8ffbbda-9480-4295-97c1-5c47651ec46", "eventTime": "2018-07-31T14:51:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-1ifs3su3itewk-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04e21138-b801-42ea-bad3-384d036002", "record_id": "flaws_cloudtrail:0000188:04e21138-b801-42ea-bad3-384d036002", "row_index": 188, "timestamp": "2018-07-31T14:51:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04e21138-b801-42ea-bad3-384d036002", "eventTime": "2018-07-31T14:51:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-1mzspe95ld5g8-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3c202359-b2f6-49b9-9e79-8ec83063ec", "record_id": "flaws_cloudtrail:0000189:a3c202359-b2f6-49b9-9e79-8ec83063ec", "row_index": 189, "timestamp": "2018-07-31T14:51:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3c202359-b2f6-49b9-9e79-8ec83063ec", "eventTime": "2018-07-31T14:51:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-1mzspe95ld5g8-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "35f492045-f9c5-4dcc-b1ae-6e1f29df38ac", "record_id": "flaws_cloudtrail:0000190:35f492045-f9c5-4dcc-b1ae-6e1f29df38ac", "row_index": 190, "timestamp": "2018-07-31T14:51:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "35f492045-f9c5-4dcc-b1ae-6e1f29df38ac", "eventTime": "2018-07-31T14:51:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-1pt5d34o61x4g-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6186ae93-a0af-4a87-a01b-37dd77eb2a10", "record_id": "flaws_cloudtrail:0000191:6186ae93-a0af-4a87-a01b-37dd77eb2a10", "row_index": 191, "timestamp": "2018-07-31T14:51:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6186ae93-a0af-4a87-a01b-37dd77eb2a10", "eventTime": "2018-07-31T14:51:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-1pt5d34o61x4g-us-west-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ee00236-5b3d-4e99-ab93-d91c389ea9be", "record_id": "flaws_cloudtrail:0000192:5ee00236-5b3d-4e99-ab93-d91c389ea9be", "row_index": 192, "timestamp": "2018-07-31T14:51:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ee00236-5b3d-4e99-ab93-d91c389ea9be", "eventTime": "2018-07-31T14:51:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-1pt5d34o61x4g-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6b63229-15ea-4795-878c-0f0f00b937ac", "record_id": "flaws_cloudtrail:0000193:d6b63229-15ea-4795-878c-0f0f00b937ac", "row_index": 193, "timestamp": "2018-07-31T14:51:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6b63229-15ea-4795-878c-0f0f00b937ac", "eventTime": "2018-07-31T14:51:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-1v4tckvs2ycw-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea55b082-f041-4e61-9e89-0edd962574", "record_id": "flaws_cloudtrail:0000194:ea55b082-f041-4e61-9e89-0edd962574", "row_index": 194, "timestamp": "2018-07-31T14:51:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea55b082-f041-4e61-9e89-0edd962574", "eventTime": "2018-07-31T14:51:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-3wlovnurwcce-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e702f920-8fcc-4682-9036-5374b45927", "record_id": "flaws_cloudtrail:0000195:e702f920-8fcc-4682-9036-5374b45927", "row_index": 195, "timestamp": "2018-07-31T14:51:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e702f920-8fcc-4682-9036-5374b45927", "eventTime": "2018-07-31T14:51:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-4kyeejh7m0af-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a69873-fb31-41b4-b1c4-b7cb9f6aa0ba", "record_id": "flaws_cloudtrail:0000196:1a69873-fb31-41b4-b1c4-b7cb9f6aa0ba", "row_index": 196, "timestamp": "2018-07-31T14:51:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a69873-fb31-41b4-b1c4-b7cb9f6aa0ba", "eventTime": "2018-07-31T14:51:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-4mb12enxj0i1-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0ef4e62-1658-4ad3-a24a-13df0f2318ea", "record_id": "flaws_cloudtrail:0000197:c0ef4e62-1658-4ad3-a24a-13df0f2318ea", "row_index": 197, "timestamp": "2018-07-31T14:51:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0ef4e62-1658-4ad3-a24a-13df0f2318ea", "eventTime": "2018-07-31T14:51:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-4mb12enxj0i1-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2112c29a-768a-4b48-b7d9-8008d6578f71", "record_id": "flaws_cloudtrail:0000198:2112c29a-768a-4b48-b7d9-8008d6578f71", "row_index": 198, "timestamp": "2018-07-31T14:51:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2112c29a-768a-4b48-b7d9-8008d6578f71", "eventTime": "2018-07-31T14:51:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-4mb12enxj0i1-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e729025-6cac-4599-9292-ed6d0d1112ad", "record_id": "flaws_cloudtrail:0000199:0e729025-6cac-4599-9292-ed6d0d1112ad", "row_index": 199, "timestamp": "2018-07-31T14:51:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e729025-6cac-4599-9292-ed6d0d1112ad", "eventTime": "2018-07-31T14:51:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-4wijs517zuzl-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bbc05c7-4ed9-4eb8-8d24-dfd34a752ee2", "record_id": "flaws_cloudtrail:0000200:8bbc05c7-4ed9-4eb8-8d24-dfd34a752ee2", "row_index": 200, "timestamp": "2018-07-31T14:51:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bbc05c7-4ed9-4eb8-8d24-dfd34a752ee2", "eventTime": "2018-07-31T14:51:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-64m07uef5sp4-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76895c0c-746e-4fa6-bfac-360ae082b1c1", "record_id": "flaws_cloudtrail:0000201:76895c0c-746e-4fa6-bfac-360ae082b1c1", "row_index": 201, "timestamp": "2018-07-31T14:51:52Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 528, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76895c0c-746e-4fa6-bfac-360ae082b1c1", "eventTime": "2018-07-31T14:51:52Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2163bdec-378d-4da5-a12c-f835c8dfdd57", "record_id": "flaws_cloudtrail:0000202:2163bdec-378d-4da5-a12c-f835c8dfdd57", "row_index": 202, "timestamp": "2018-07-31T14:51:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2163bdec-378d-4da5-a12c-f835c8dfdd57", "eventTime": "2018-07-31T14:51:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-64m07uef5sp4-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba0fadca-440a-4893-9c52-cc1f134d0aac", "record_id": "flaws_cloudtrail:0000203:ba0fadca-440a-4893-9c52-cc1f134d0aac", "row_index": 203, "timestamp": "2018-07-31T14:51:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba0fadca-440a-4893-9c52-cc1f134d0aac", "eventTime": "2018-07-31T14:51:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-64m07uef5sp4-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8d7e16a-9c5c-4610-9c3d-af48f41a0e0c", "record_id": "flaws_cloudtrail:0000204:e8d7e16a-9c5c-4610-9c3d-af48f41a0e0c", "row_index": 204, "timestamp": "2018-07-31T14:51:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8d7e16a-9c5c-4610-9c3d-af48f41a0e0c", "eventTime": "2018-07-31T14:51:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-74gzunazu84c-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a21ec16b-0acf-4a5a-8554-08c8b84c96a7", "record_id": "flaws_cloudtrail:0000205:a21ec16b-0acf-4a5a-8554-08c8b84c96a7", "row_index": 205, "timestamp": "2018-07-31T14:52:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a21ec16b-0acf-4a5a-8554-08c8b84c96a7", "eventTime": "2018-07-31T14:52:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-74gzunazu84c-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e490e7c-4a92-41b3-be93-01a12ba14cc4", "record_id": "flaws_cloudtrail:0000206:8e490e7c-4a92-41b3-be93-01a12ba14cc4", "row_index": 206, "timestamp": "2018-07-31T14:52:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e490e7c-4a92-41b3-be93-01a12ba14cc4", "eventTime": "2018-07-31T14:52:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-74gzunazu84c-us-west-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91774a77-b1a5-4a54-8900-53b6111e9f38", "record_id": "flaws_cloudtrail:0000207:91774a77-b1a5-4a54-8900-53b6111e9f38", "row_index": 207, "timestamp": "2018-07-31T14:52:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91774a77-b1a5-4a54-8900-53b6111e9f38", "eventTime": "2018-07-31T14:52:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-74gzunazu84c-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6860c06-b84d-478e-9283-65cd12c2ee61", "record_id": "flaws_cloudtrail:0000208:e6860c06-b84d-478e-9283-65cd12c2ee61", "row_index": 208, "timestamp": "2018-07-31T14:52:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6860c06-b84d-478e-9283-65cd12c2ee61", "eventTime": "2018-07-31T14:52:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-8q7eam8ok72h-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f1a6b5a-c713-4e97-9972-39ad947bca75", "record_id": "flaws_cloudtrail:0000209:2f1a6b5a-c713-4e97-9972-39ad947bca75", "row_index": 209, "timestamp": "2018-07-31T14:52:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f1a6b5a-c713-4e97-9972-39ad947bca75", "eventTime": "2018-07-31T14:52:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-9i3b9nagii3j-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36c45cc3-d4f4-4098-b2da-9dabf283422a", "record_id": "flaws_cloudtrail:0000210:36c45cc3-d4f4-4098-b2da-9dabf283422a", "row_index": 210, "timestamp": "2018-07-31T14:52:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36c45cc3-d4f4-4098-b2da-9dabf283422a", "eventTime": "2018-07-31T14:52:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-9i3b9nagii3j-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "546785e8a-fd6d-413b-a9f8-8fd953c76cf9", "record_id": "flaws_cloudtrail:0000211:546785e8a-fd6d-413b-a9f8-8fd953c76cf9", "row_index": 211, "timestamp": "2018-07-31T14:52:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "546785e8a-fd6d-413b-a9f8-8fd953c76cf9", "eventTime": "2018-07-31T14:52:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-dkgzrax5k71z-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d01ed3a-922f-48d6-b64e-ce9d272c5091", "record_id": "flaws_cloudtrail:0000212:7d01ed3a-922f-48d6-b64e-ce9d272c5091", "row_index": 212, "timestamp": "2018-07-31T14:52:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d01ed3a-922f-48d6-b64e-ce9d272c5091", "eventTime": "2018-07-31T14:52:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-dkgzrax5k71z-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce09f2ec-3a73-4776-bd90-856fa6fc9e5c", "record_id": "flaws_cloudtrail:0000213:ce09f2ec-3a73-4776-bd90-856fa6fc9e5c", "row_index": 213, "timestamp": "2018-07-31T14:52:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce09f2ec-3a73-4776-bd90-856fa6fc9e5c", "eventTime": "2018-07-31T14:52:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-dy1g2ihs1xlb-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ac48e5a-d4ee-4131-bd27-9d47e1d8de0a", "record_id": "flaws_cloudtrail:0000214:4ac48e5a-d4ee-4131-bd27-9d47e1d8de0a", "row_index": 214, "timestamp": "2018-07-31T14:52:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ac48e5a-d4ee-4131-bd27-9d47e1d8de0a", "eventTime": "2018-07-31T14:52:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-dyus6pkt8wph-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19e557776-d284-4a79-b8c5-993081f7b55c8", "record_id": "flaws_cloudtrail:0000215:19e557776-d284-4a79-b8c5-993081f7b55c8", "row_index": 215, "timestamp": "2018-07-31T14:52:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19e557776-d284-4a79-b8c5-993081f7b55c8", "eventTime": "2018-07-31T14:52:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-dyus6pkt8wph-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f86b93a-b859-4bce-a086-cca799978c1", "record_id": "flaws_cloudtrail:0000216:8f86b93a-b859-4bce-a086-cca799978c1", "row_index": 216, "timestamp": "2018-07-31T14:52:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f86b93a-b859-4bce-a086-cca799978c1", "eventTime": "2018-07-31T14:52:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-ejqiolrs31m7-ca-central-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26448f0-f8fc-4e40-b914-b7f84992af", "record_id": "flaws_cloudtrail:0000217:26448f0-f8fc-4e40-b914-b7f84992af", "row_index": 217, "timestamp": "2018-07-31T14:52:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26448f0-f8fc-4e40-b914-b7f84992af", "eventTime": "2018-07-31T14:52:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-ejqiolrs31m7-sa-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44828e92-5581-498b-8a57-a017e4d27b24", "record_id": "flaws_cloudtrail:0000218:44828e92-5581-498b-8a57-a017e4d27b24", "row_index": 218, "timestamp": "2018-07-31T14:52:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44828e92-5581-498b-8a57-a017e4d27b24", "eventTime": "2018-07-31T14:52:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-ejqiolrs31m7-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "409034-cf68-4895-a753-903740b926b", "record_id": "flaws_cloudtrail:0000219:409034-cf68-4895-a753-903740b926b", "row_index": 219, "timestamp": "2018-07-31T14:52:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "409034-cf68-4895-a753-903740b926b", "eventTime": "2018-07-31T14:52:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-ejqiolrs31m7-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17232-83ff-45e7-a3ef-3c1937c85cc1", "record_id": "flaws_cloudtrail:0000220:17232-83ff-45e7-a3ef-3c1937c85cc1", "row_index": 220, "timestamp": "2018-07-31T14:52:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17232-83ff-45e7-a3ef-3c1937c85cc1", "eventTime": "2018-07-31T14:52:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-ejqiolrs31m7-us-west-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1cdbc75-48eb-4b6b-a4db-d7035dd9e429", "record_id": "flaws_cloudtrail:0000221:a1cdbc75-48eb-4b6b-a4db-d7035dd9e429", "row_index": 221, "timestamp": "2018-07-31T14:52:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1cdbc75-48eb-4b6b-a4db-d7035dd9e429", "eventTime": "2018-07-31T14:52:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-ejqiolrs31m7-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37a431ce-a0f4-44ee-9a1b-3120c4ed3b68", "record_id": "flaws_cloudtrail:0000222:37a431ce-a0f4-44ee-9a1b-3120c4ed3b68", "row_index": 222, "timestamp": "2018-07-31T14:52:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37a431ce-a0f4-44ee-9a1b-3120c4ed3b68", "eventTime": "2018-07-31T14:52:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-gtfoku02jy4m-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbf37c30-0a00-4b08-9c90-971557ac8045", "record_id": "flaws_cloudtrail:0000223:fbf37c30-0a00-4b08-9c90-971557ac8045", "row_index": 223, "timestamp": "2018-07-31T14:52:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbf37c30-0a00-4b08-9c90-971557ac8045", "eventTime": "2018-07-31T14:52:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-hmzwjfsemxzb-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "160cfd04-79e0-44a0-b1fe-d08a452a2ef2", "record_id": "flaws_cloudtrail:0000224:160cfd04-79e0-44a0-b1fe-d08a452a2ef2", "row_index": 224, "timestamp": "2018-07-31T14:52:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "160cfd04-79e0-44a0-b1fe-d08a452a2ef2", "eventTime": "2018-07-31T14:52:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-kfs3iwhwcart-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9711ed3-4b66-474b-869e-8bf7108ff437", "record_id": "flaws_cloudtrail:0000225:e9711ed3-4b66-474b-869e-8bf7108ff437", "row_index": 225, "timestamp": "2018-07-31T14:52:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9711ed3-4b66-474b-869e-8bf7108ff437", "eventTime": "2018-07-31T14:52:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-kfs3iwhwcart-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "869b3d8f-7ab8-41b1-8bea-71eea3ccebd5", "record_id": "flaws_cloudtrail:0000226:869b3d8f-7ab8-41b1-8bea-71eea3ccebd5", "row_index": 226, "timestamp": "2018-07-31T14:52:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "869b3d8f-7ab8-41b1-8bea-71eea3ccebd5", "eventTime": "2018-07-31T14:52:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-n28of7jxkhoe-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d9c9d367-a790-49f0-82d1-1e2983d1d983", "record_id": "flaws_cloudtrail:0000227:d9c9d367-a790-49f0-82d1-1e2983d1d983", "row_index": 227, "timestamp": "2018-07-31T14:52:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d9c9d367-a790-49f0-82d1-1e2983d1d983", "eventTime": "2018-07-31T14:52:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-n28of7jxkhoe-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2d53a71-37d6-47ea-9e5e-fa7f752cf842", "record_id": "flaws_cloudtrail:0000228:e2d53a71-37d6-47ea-9e5e-fa7f752cf842", "row_index": 228, "timestamp": "2018-07-31T14:52:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2d53a71-37d6-47ea-9e5e-fa7f752cf842", "eventTime": "2018-07-31T14:52:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-rh35u9big8kz-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b236008-0395-49ad-b7ca-dffb60c411d5", "record_id": "flaws_cloudtrail:0000229:b236008-0395-49ad-b7ca-dffb60c411d5", "row_index": 229, "timestamp": "2018-07-31T14:52:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b236008-0395-49ad-b7ca-dffb60c411d5", "eventTime": "2018-07-31T14:52:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-v2h1thbcog1q-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f64a0df-32e6-4295-b8ba-12323330a783", "record_id": "flaws_cloudtrail:0000230:0f64a0df-32e6-4295-b8ba-12323330a783", "row_index": 230, "timestamp": "2018-07-31T14:52:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f64a0df-32e6-4295-b8ba-12323330a783", "eventTime": "2018-07-31T14:52:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-v8i2ump8rhn1-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0beb8aa6-a2d0-48f9-958c-c6c485dea8fb", "record_id": "flaws_cloudtrail:0000231:0beb8aa6-a2d0-48f9-958c-c6c485dea8fb", "row_index": 231, "timestamp": "2018-07-31T14:52:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0beb8aa6-a2d0-48f9-958c-c6c485dea8fb", "eventTime": "2018-07-31T14:52:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-w4z8fudy56ly-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faf84f04-d005-49e5-8dc9-a88a14bad9c3", "record_id": "flaws_cloudtrail:0000232:faf84f04-d005-49e5-8dc9-a88a14bad9c3", "row_index": 232, "timestamp": "2018-07-31T14:52:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faf84f04-d005-49e5-8dc9-a88a14bad9c3", "eventTime": "2018-07-31T14:52:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-w4z8fudy56ly-us-east-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d08e8b40-3a68-4ce2-a3f1-9d3fbeb93af0", "record_id": "flaws_cloudtrail:0000233:d08e8b40-3a68-4ce2-a3f1-9d3fbeb93af0", "row_index": 233, "timestamp": "2018-07-31T14:52:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d08e8b40-3a68-4ce2-a3f1-9d3fbeb93af0", "eventTime": "2018-07-31T14:52:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cf-templates-wg15tob5nb3r-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4701ff8-1412-4c97-ba19-6f76eeb577dc", "record_id": "flaws_cloudtrail:0000234:a4701ff8-1412-4c97-ba19-6f76eeb577dc", "row_index": 234, "timestamp": "2018-07-31T14:52:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4701ff8-1412-4c97-ba19-6f76eeb577dc", "eventTime": "2018-07-31T14:52:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cfprod-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "037913bf-ce08-4866-a40e-88ef568a3e8c", "record_id": "flaws_cloudtrail:0000235:037913bf-ce08-4866-a40e-88ef568a3e8c", "row_index": 235, "timestamp": "2018-07-31T14:53:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "037913bf-ce08-4866-a40e-88ef568a3e8c", "eventTime": "2018-07-31T14:53:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cfprod-config", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "943d80ef-dadd-43e1-9799-70ed7542ccd6", "record_id": "flaws_cloudtrail:0000236:943d80ef-dadd-43e1-9799-70ed7542ccd6", "row_index": 236, "timestamp": "2018-07-31T14:53:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "943d80ef-dadd-43e1-9799-70ed7542ccd6", "eventTime": "2018-07-31T14:53:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cfprod-ct", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0042ce25-45d5-46c5-a40c-871099315b80", "record_id": "flaws_cloudtrail:0000237:0042ce25-45d5-46c5-a40c-871099315b80", "row_index": 237, "timestamp": "2018-07-31T14:53:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0042ce25-45d5-46c5-a40c-871099315b80", "eventTime": "2018-07-31T14:53:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cheetah-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e3e83bf-d800-49ee-a9c1-1a101e91784e", "record_id": "flaws_cloudtrail:0000238:3e3e83bf-d800-49ee-a9c1-1a101e91784e", "row_index": 238, "timestamp": "2018-07-31T14:53:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e3e83bf-d800-49ee-a9c1-1a101e91784e", "eventTime": "2018-07-31T14:53:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cheetah-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc1ec49d-09f6-4c3b-b4c1-7b2a1de216c9", "record_id": "flaws_cloudtrail:0000239:bc1ec49d-09f6-4c3b-b4c1-7b2a1de216c9", "row_index": 239, "timestamp": "2018-07-31T14:53:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc1ec49d-09f6-4c3b-b4c1-7b2a1de216c9", "eventTime": "2018-07-31T14:53:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cifar10-public-dataset", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd0e8332-f670-4d08-9893-64d6b18e6247", "record_id": "flaws_cloudtrail:0000240:bd0e8332-f670-4d08-9893-64d6b18e6247", "row_index": 240, "timestamp": "2018-07-31T14:53:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd0e8332-f670-4d08-9893-64d6b18e6247", "eventTime": "2018-07-31T14:53:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cifar100-public-dataset", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97c9bb0a-362b-486e-b27c-10810d7c78d4", "record_id": "flaws_cloudtrail:0000241:97c9bb0a-362b-486e-b27c-10810d7c78d4", "row_index": 241, "timestamp": "2018-07-31T14:53:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97c9bb0a-362b-486e-b27c-10810d7c78d4", "eventTime": "2018-07-31T14:53:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "clicagent-csv", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a92dd20-785a-404b-89e6-ea4dbbdc2c23", "record_id": "flaws_cloudtrail:0000242:7a92dd20-785a-404b-89e6-ea4dbbdc2c23", "row_index": 242, "timestamp": "2018-07-31T14:53:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a92dd20-785a-404b-89e6-ea4dbbdc2c23", "eventTime": "2018-07-31T14:53:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "climate-scratch-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4072f64f-a4a1-442f-8a5c-43e79024fec5", "record_id": "flaws_cloudtrail:0000243:4072f64f-a4a1-442f-8a5c-43e79024fec5", "row_index": 243, "timestamp": "2018-07-31T14:53:11Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 523, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4072f64f-a4a1-442f-8a5c-43e79024fec5", "eventTime": "2018-07-31T14:53:11Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d925223-fd5f-46cc-bb40-b2c1f752d162", "record_id": "flaws_cloudtrail:0000244:1d925223-fd5f-46cc-bb40-b2c1f752d162", "row_index": 244, "timestamp": "2018-07-31T14:53:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d925223-fd5f-46cc-bb40-b2c1f752d162", "eventTime": "2018-07-31T14:53:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-aws-config", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10ea44fc-e04a-4e4a-9a48-9349f5aaa395", "record_id": "flaws_cloudtrail:0000245:10ea44fc-e04a-4e4a-9a48-9349f5aaa395", "row_index": 245, "timestamp": "2018-07-31T14:53:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10ea44fc-e04a-4e4a-9a48-9349f5aaa395", "eventTime": "2018-07-31T14:53:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-beta-scratch-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1b362834-acdb-43e8-81df-7dec5b8cd2a0", "record_id": "flaws_cloudtrail:0000246:e1b362834-acdb-43e8-81df-7dec5b8cd2a0", "row_index": 246, "timestamp": "2018-07-31T14:53:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1b362834-acdb-43e8-81df-7dec5b8cd2a0", "eventTime": "2018-07-31T14:53:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-cloudtrail-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddcf1c01-b9c2-4c0b-ac2b-e17cc2c28e2d", "record_id": "flaws_cloudtrail:0000247:ddcf1c01-b9c2-4c0b-ac2b-e17cc2c28e2d", "row_index": 247, "timestamp": "2018-07-31T14:53:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddcf1c01-b9c2-4c0b-ac2b-e17cc2c28e2d", "eventTime": "2018-07-31T14:53:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-config-bucket", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cea9b8ac-d994-4aab-91dd-e271edf4444c", "record_id": "flaws_cloudtrail:0000248:cea9b8ac-d994-4aab-91dd-e271edf4444c", "row_index": 248, "timestamp": "2018-07-31T14:53:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cea9b8ac-d994-4aab-91dd-e271edf4444c", "eventTime": "2018-07-31T14:53:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-data", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d59c1872-e429-412a-9462-375fdb6770ff", "record_id": "flaws_cloudtrail:0000249:d59c1872-e429-412a-9462-375fdb6770ff", "row_index": 249, "timestamp": "2018-07-31T14:53:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d59c1872-e429-412a-9462-375fdb6770ff", "eventTime": "2018-07-31T14:53:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-docker-registry", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "119fccd7-6441-4e32-a0f6-879361ad0a1f9", "record_id": "flaws_cloudtrail:0000250:119fccd7-6441-4e32-a0f6-879361ad0a1f9", "row_index": 250, "timestamp": "2018-07-31T14:53:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "119fccd7-6441-4e32-a0f6-879361ad0a1f9", "eventTime": "2018-07-31T14:53:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-non-prime", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62b1b88c-3429-49db-83d1-210e296f86cb", "record_id": "flaws_cloudtrail:0000251:62b1b88c-3429-49db-83d1-210e296f86cb", "row_index": 251, "timestamp": "2018-07-31T14:53:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62b1b88c-3429-49db-83d1-210e296f86cb", "eventTime": "2018-07-31T14:53:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-np-aws-config", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7d7c667-5e4a-452e-83b4-cc3a3e655285", "record_id": "flaws_cloudtrail:0000252:c7d7c667-5e4a-452e-83b4-cc3a3e655285", "row_index": 252, "timestamp": "2018-07-31T14:53:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7d7c667-5e4a-452e-83b4-cc3a3e655285", "eventTime": "2018-07-31T14:53:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-ops", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3db451860-e00e-419e-b0ed-4d7898a59a9c", "record_id": "flaws_cloudtrail:0000253:3db451860-e00e-419e-b0ed-4d7898a59a9c", "row_index": 253, "timestamp": "2018-07-31T14:53:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3db451860-e00e-419e-b0ed-4d7898a59a9c", "eventTime": "2018-07-31T14:53:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-perm-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae404c21-8db4-4a66-b067-f51b1518a125", "record_id": "flaws_cloudtrail:0000254:ae404c21-8db4-4a66-b067-f51b1518a125", "row_index": 254, "timestamp": "2018-07-31T14:53:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae404c21-8db4-4a66-b067-f51b1518a125", "eventTime": "2018-07-31T14:53:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloud-analytics-scratch-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a1b441e-ac96-4ccf-a857-f9bbf11dcbef", "record_id": "flaws_cloudtrail:0000255:7a1b441e-ac96-4ccf-a857-f9bbf11dcbef", "row_index": 255, "timestamp": "2018-07-31T14:53:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a1b441e-ac96-4ccf-a857-f9bbf11dcbef", "eventTime": "2018-07-31T14:53:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudberrymssqlbackup-poc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f4c8144-66a6-43f5-b3ce-8d2dbf062b60", "record_id": "flaws_cloudtrail:0000256:0f4c8144-66a6-43f5-b3ce-8d2dbf062b60", "row_index": 256, "timestamp": "2018-07-31T14:53:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f4c8144-66a6-43f5-b3ce-8d2dbf062b60", "eventTime": "2018-07-31T14:53:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "clouddrive-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec0b0cad-c2ad-4b02-a9c8-6018b2b3429a", "record_id": "flaws_cloudtrail:0000257:ec0b0cad-c2ad-4b02-a9c8-6018b2b3429a", "row_index": 257, "timestamp": "2018-07-31T14:53:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec0b0cad-c2ad-4b02-a9c8-6018b2b3429a", "eventTime": "2018-07-31T14:53:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudformation", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f77780-bd28-42a3-b069-3495f4cc0dfa", "record_id": "flaws_cloudtrail:0000258:f77780-bd28-42a3-b069-3495f4cc0dfa", "row_index": 258, "timestamp": "2018-07-31T14:53:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f77780-bd28-42a3-b069-3495f4cc0dfa", "eventTime": "2018-07-31T14:53:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudfoundry-longterm-logs-ef3dad329d10", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcf03667-d9e7-4d22-a0f0-a886621e075e9", "record_id": "flaws_cloudtrail:0000259:dcf03667-d9e7-4d22-a0f0-a886621e075e9", "row_index": 259, "timestamp": "2018-07-31T14:53:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcf03667-d9e7-4d22-a0f0-a886621e075e9", "eventTime": "2018-07-31T14:53:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudfoundry-longterm-logs-cd0773ca50ac", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d02b7249-85dd-4054-b158-927fd03f9af0", "record_id": "flaws_cloudtrail:0000260:d02b7249-85dd-4054-b158-927fd03f9af0", "row_index": 260, "timestamp": "2018-07-31T14:53:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d02b7249-85dd-4054-b158-927fd03f9af0", "eventTime": "2018-07-31T14:53:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-aws-micro-admin", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbac405e-d49a-4722-8a2e-5f2140d639a6", "record_id": "flaws_cloudtrail:0000261:bbac405e-d49a-4722-8a2e-5f2140d639a6", "row_index": 261, "timestamp": "2018-07-31T14:53:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbac405e-d49a-4722-8a2e-5f2140d639a6", "eventTime": "2018-07-31T14:53:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-mock-dev-team-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c771c6c1-1f68-481f-92a3-a87833cb48", "record_id": "flaws_cloudtrail:0000262:c771c6c1-1f68-481f-92a3-a87833cb48", "row_index": 262, "timestamp": "2018-07-31T14:53:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c771c6c1-1f68-481f-92a3-a87833cb48", "eventTime": "2018-07-31T14:53:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-mock-dev-team-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8be57791-cea0-4b2c-9970-3bf48d6c0899", "record_id": "flaws_cloudtrail:0000263:8be57791-cea0-4b2c-9970-3bf48d6c0899", "row_index": 263, "timestamp": "2018-07-31T14:53:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8be57791-cea0-4b2c-9970-3bf48d6c0899", "eventTime": "2018-07-31T14:53:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-monitoring-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aede2439-4c41-4030-adc7-e232fd5be9cf", "record_id": "flaws_cloudtrail:0000264:aede2439-4c41-4030-adc7-e232fd5be9cf", "row_index": 264, "timestamp": "2018-07-31T14:53:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aede2439-4c41-4030-adc7-e232fd5be9cf", "eventTime": "2018-07-31T14:53:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-monitoring-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b43925ba-7f99-480b-aa80-6e0e0ba828ae", "record_id": "flaws_cloudtrail:0000265:b43925ba-7f99-480b-aa80-6e0e0ba828ae", "row_index": 265, "timestamp": "2018-07-31T14:53:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b43925ba-7f99-480b-aa80-6e0e0ba828ae", "eventTime": "2018-07-31T14:53:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e18f39a-31e8-423a-83b7-aeb181e87aa5", "record_id": "flaws_cloudtrail:0000266:4e18f39a-31e8-423a-83b7-aeb181e87aa5", "row_index": 266, "timestamp": "2018-07-31T14:53:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e18f39a-31e8-423a-83b7-aeb181e87aa5", "eventTime": "2018-07-31T14:53:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06f701dc-e68b-4c85-b249-414191c7cc5", "record_id": "flaws_cloudtrail:0000267:06f701dc-e68b-4c85-b249-414191c7cc5", "row_index": 267, "timestamp": "2018-07-31T14:53:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06f701dc-e68b-4c85-b249-414191c7cc5", "eventTime": "2018-07-31T14:53:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56f4cd9f-70a9-44c1-b4b8-ad591a4399f8", "record_id": "flaws_cloudtrail:0000268:56f4cd9f-70a9-44c1-b4b8-ad591a4399f8", "row_index": 268, "timestamp": "2018-07-31T14:53:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56f4cd9f-70a9-44c1-b4b8-ad591a4399f8", "eventTime": "2018-07-31T14:53:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-us-east-2-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9da349345-806a-4cc7-bfcb-83381900f2fa", "record_id": "flaws_cloudtrail:0000269:9da349345-806a-4cc7-bfcb-83381900f2fa", "row_index": 269, "timestamp": "2018-07-31T14:53:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9da349345-806a-4cc7-bfcb-83381900f2fa", "eventTime": "2018-07-31T14:53:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-us-west-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "577bf53b-5090-4235-affa-bf141e7d312d", "record_id": "flaws_cloudtrail:0000270:577bf53b-5090-4235-affa-bf141e7d312d", "row_index": 270, "timestamp": "2018-07-31T14:53:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "577bf53b-5090-4235-affa-bf141e7d312d", "eventTime": "2018-07-31T14:53:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69895cde-867d-4ae2-89b1-8bb54a9d03d9", "record_id": "flaws_cloudtrail:0000271:69895cde-867d-4ae2-89b1-8bb54a9d03d9", "row_index": 271, "timestamp": "2018-07-31T14:54:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69895cde-867d-4ae2-89b1-8bb54a9d03d9", "eventTime": "2018-07-31T14:54:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudops-us-west-2-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "666123-ce82-4bb9-abe7-cdd8e93f527f", "record_id": "flaws_cloudtrail:0000272:666123-ce82-4bb9-abe7-cdd8e93f527f", "row_index": 272, "timestamp": "2018-07-31T14:54:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "666123-ce82-4bb9-abe7-cdd8e93f527f", "eventTime": "2018-07-31T14:54:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudtrail-df0d7933927b-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee42a5f2-2a99-4c37-a578-af279905ff8e", "record_id": "flaws_cloudtrail:0000273:ee42a5f2-2a99-4c37-a578-af279905ff8e", "row_index": 273, "timestamp": "2018-07-31T14:54:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee42a5f2-2a99-4c37-a578-af279905ff8e", "eventTime": "2018-07-31T14:54:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cloudtrail-041aa22dbf4a-us-east-1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb25668-bf54-41a9-94a3-a5f8d23e2889", "record_id": "flaws_cloudtrail:0000274:fb25668-bf54-41a9-94a3-a5f8d23e2889", "row_index": 274, "timestamp": "2018-07-31T14:54:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb25668-bf54-41a9-94a3-a5f8d23e2889", "eventTime": "2018-07-31T14:54:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "codepipeline-us-east-1-916438474319", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2361c4bd-b5fc-45a3-9e04-f61793b5f0", "record_id": "flaws_cloudtrail:0000275:2361c4bd-b5fc-45a3-9e04-f61793b5f0", "row_index": 275, "timestamp": "2018-07-31T14:54:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2361c4bd-b5fc-45a3-9e04-f61793b5f0", "eventTime": "2018-07-31T14:54:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "codepipeline-us-east-1-768770118577", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82b86c57-48f0-4445-9599-0b366e2839a6", "record_id": "flaws_cloudtrail:0000276:82b86c57-48f0-4445-9599-0b366e2839a6", "row_index": 276, "timestamp": "2018-07-31T14:54:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82b86c57-48f0-4445-9599-0b366e2839a6", "eventTime": "2018-07-31T14:54:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cognizant-backend-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3354e01d-8fb5-4737-9321-10af2a310106", "record_id": "flaws_cloudtrail:0000277:3354e01d-8fb5-4737-9321-10af2a310106", "row_index": 277, "timestamp": "2018-07-31T14:54:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3354e01d-8fb5-4737-9321-10af2a310106", "eventTime": "2018-07-31T14:54:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cognizant-backend-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4bb7955-fa99-46ba-80a8-ad067ef3dde2", "record_id": "flaws_cloudtrail:0000278:c4bb7955-fa99-46ba-80a8-ad067ef3dde2", "row_index": 278, "timestamp": "2018-07-31T14:54:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4bb7955-fa99-46ba-80a8-ad067ef3dde2", "eventTime": "2018-07-31T14:54:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "columbus-backups-prd", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0053d0cd-353a-4dcd-a5be-1e5d4b3b099a", "record_id": "flaws_cloudtrail:0000279:0053d0cd-353a-4dcd-a5be-1e5d4b3b099a", "row_index": 279, "timestamp": "2018-07-31T14:54:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0053d0cd-353a-4dcd-a5be-1e5d4b3b099a", "eventTime": "2018-07-31T14:54:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "com.intelex.goal.claims.attachments", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e9871c-eb88-40ee-b265-2a62853a6c0", "record_id": "flaws_cloudtrail:0000280:20e9871c-eb88-40ee-b265-2a62853a6c0", "row_index": 280, "timestamp": "2018-07-31T14:54:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e9871c-eb88-40ee-b265-2a62853a6c0", "eventTime": "2018-07-31T14:54:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "com.monsanto.dataqc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb57d272-c96b-41c7-8d04-c224382debea", "record_id": "flaws_cloudtrail:0000281:fb57d272-c96b-41c7-8d04-c224382debea", "row_index": 281, "timestamp": "2018-07-31T14:54:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb57d272-c96b-41c7-8d04-c224382debea", "eventTime": "2018-07-31T14:54:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "company360-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c3ca813-074e-44f4-9fad-908a67dd6d6e", "record_id": "flaws_cloudtrail:0000282:4c3ca813-074e-44f4-9fad-908a67dd6d6e", "row_index": 282, "timestamp": "2018-07-31T14:54:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c3ca813-074e-44f4-9fad-908a67dd6d6e", "eventTime": "2018-07-31T14:54:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "company360-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9310fa47-fe60-45a0-972d-abdf95e7b05a", "record_id": "flaws_cloudtrail:0000283:9310fa47-fe60-45a0-972d-abdf95e7b05a", "row_index": 283, "timestamp": "2018-07-31T14:54:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9310fa47-fe60-45a0-972d-abdf95e7b05a", "eventTime": "2018-07-31T14:54:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "con-tempprod-s3-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3066ee0c-51d5-40e9-a522-41ca9cb07ff7", "record_id": "flaws_cloudtrail:0000284:3066ee0c-51d5-40e9-a522-41ca9cb07ff7", "row_index": 284, "timestamp": "2018-07-31T14:54:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3066ee0c-51d5-40e9-a522-41ca9cb07ff7", "eventTime": "2018-07-31T14:54:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-cf-templates-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dba965d-e8c4-4aa7-9bc8-a3fbf73891fc", "record_id": "flaws_cloudtrail:0000285:2dba965d-e8c4-4aa7-9bc8-a3fbf73891fc", "row_index": 285, "timestamp": "2018-07-31T14:54:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dba965d-e8c4-4aa7-9bc8-a3fbf73891fc", "eventTime": "2018-07-31T14:54:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-cf-templates-mergeddev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a55f57a0-118b-473f-8c88-3db650445b79", "record_id": "flaws_cloudtrail:0000286:a55f57a0-118b-473f-8c88-3db650445b79", "row_index": 286, "timestamp": "2018-07-31T14:54:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a55f57a0-118b-473f-8c88-3db650445b79", "eventTime": "2018-07-31T14:54:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-cf-templates-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5e0e264-6502-434f-9860-8c47076bfb8", "record_id": "flaws_cloudtrail:0000287:b5e0e264-6502-434f-9860-8c47076bfb8", "row_index": 287, "timestamp": "2018-07-31T14:54:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5e0e264-6502-434f-9860-8c47076bfb8", "eventTime": "2018-07-31T14:54:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-cloudtrail-mergeddev-dev-environment", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e698ccbe-a9ad-483d-8561-41defb5a06b7", "record_id": "flaws_cloudtrail:0000288:e698ccbe-a9ad-483d-8561-41defb5a06b7", "row_index": 288, "timestamp": "2018-07-31T14:54:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e698ccbe-a9ad-483d-8561-41defb5a06b7", "eventTime": "2018-07-31T14:54:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-cloudtrail-prod-qa-environment", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4e74f65-b715-47d6-b249-8478d0c295f7", "record_id": "flaws_cloudtrail:0000289:f4e74f65-b715-47d6-b249-8478d0c295f7", "row_index": 289, "timestamp": "2018-07-31T14:54:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4e74f65-b715-47d6-b249-8478d0c295f7", "eventTime": "2018-07-31T14:54:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-dev-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a8fe3a4-c2e9-4bec-9c82-76da5faba660", "record_id": "flaws_cloudtrail:0000290:1a8fe3a4-c2e9-4bec-9c82-76da5faba660", "row_index": 290, "timestamp": "2018-07-31T14:54:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a8fe3a4-c2e9-4bec-9c82-76da5faba660", "eventTime": "2018-07-31T14:54:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-dev-backup-temp", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1145edef-a669-4e64-9b8f-919ed8ee1a28", "record_id": "flaws_cloudtrail:0000291:1145edef-a669-4e64-9b8f-919ed8ee1a28", "row_index": 291, "timestamp": "2018-07-31T14:54:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1145edef-a669-4e64-9b8f-919ed8ee1a28", "eventTime": "2018-07-31T14:54:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-dev-backup-temp2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1775e3c2-57e0-47f0-aa20-99946bb6251c", "record_id": "flaws_cloudtrail:0000292:1775e3c2-57e0-47f0-aa20-99946bb6251c", "row_index": 292, "timestamp": "2018-07-31T14:54:27Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 533, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1775e3c2-57e0-47f0-aa20-99946bb6251c", "eventTime": "2018-07-31T14:54:27Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d70abbfb-1af9-40aa-b3e7-20ad5d5f96ae", "record_id": "flaws_cloudtrail:0000293:d70abbfb-1af9-40aa-b3e7-20ad5d5f96ae", "row_index": 293, "timestamp": "2018-07-31T14:54:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d70abbfb-1af9-40aa-b3e7-20ad5d5f96ae", "eventTime": "2018-07-31T14:54:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-dev-cloudtrails", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63f999ae-648b-460f-b975-6e250c05ae5d", "record_id": "flaws_cloudtrail:0000294:63f999ae-648b-460f-b975-6e250c05ae5d", "row_index": 294, "timestamp": "2018-07-31T14:54:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63f999ae-648b-460f-b975-6e250c05ae5d", "eventTime": "2018-07-31T14:54:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-dev-config-snapshots", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7d2af55-e7b0-4a1d-8a6e-b31a647a5bab", "record_id": "flaws_cloudtrail:0000295:b7d2af55-e7b0-4a1d-8a6e-b31a647a5bab", "row_index": 295, "timestamp": "2018-07-31T14:54:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7d2af55-e7b0-4a1d-8a6e-b31a647a5bab", "eventTime": "2018-07-31T14:54:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-dev-dynamodb-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bb00f3e-89e7-4040-b8a4-ac5ac95924", "record_id": "flaws_cloudtrail:0000296:2bb00f3e-89e7-4040-b8a4-ac5ac95924", "row_index": 296, "timestamp": "2018-07-31T14:54:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bb00f3e-89e7-4040-b8a4-ac5ac95924", "eventTime": "2018-07-31T14:54:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-dev-pipeline", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de619c58-0d49-4312-a75d-86dc07c280a0", "record_id": "flaws_cloudtrail:0000297:de619c58-0d49-4312-a75d-86dc07c280a0", "row_index": 297, "timestamp": "2018-07-31T14:54:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de619c58-0d49-4312-a75d-86dc07c280a0", "eventTime": "2018-07-31T14:54:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-mergeddev-backup-temp", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16fc9d7b-e04a-4bba-9ca4-afed42338e3f", "record_id": "flaws_cloudtrail:0000298:16fc9d7b-e04a-4bba-9ca4-afed42338e3f", "row_index": 298, "timestamp": "2018-07-31T14:54:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16fc9d7b-e04a-4bba-9ca4-afed42338e3f", "eventTime": "2018-07-31T14:54:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-mergeddev-config-snapshots", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8fae92f-1e4d-43eb-b9ff-45bf4a77c8b1", "record_id": "flaws_cloudtrail:0000299:b8fae92f-1e4d-43eb-b9ff-45bf4a77c8b1", "row_index": 299, "timestamp": "2018-07-31T14:54:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8fae92f-1e4d-43eb-b9ff-45bf4a77c8b1", "eventTime": "2018-07-31T14:54:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-mergeddev-dynamodb-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e3c3536-bf24-41f4-9795-12d0de650d22", "record_id": "flaws_cloudtrail:0000300:2e3c3536-bf24-41f4-9795-12d0de650d22", "row_index": 300, "timestamp": "2018-07-31T14:54:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e3c3536-bf24-41f4-9795-12d0de650d22", "eventTime": "2018-07-31T14:54:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-mergeddev-pipeline", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb1d0853-2ad8-481e-aca1-bbdbd6db7642", "record_id": "flaws_cloudtrail:0000301:eb1d0853-2ad8-481e-aca1-bbdbd6db7642", "row_index": 301, "timestamp": "2018-07-31T14:54:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb1d0853-2ad8-481e-aca1-bbdbd6db7642", "eventTime": "2018-07-31T14:54:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-mergeddev-transformation-pipeline", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "069b6e4d-e428-4dc0-a1d0-56e1028a6a40", "record_id": "flaws_cloudtrail:0000302:069b6e4d-e428-4dc0-a1d0-56e1028a6a40", "row_index": 302, "timestamp": "2018-07-31T14:54:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "069b6e4d-e428-4dc0-a1d0-56e1028a6a40", "eventTime": "2018-07-31T14:54:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-prod-dynamodb-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3e9b834-fa7d-4746-bd80-edb85fd734ac", "record_id": "flaws_cloudtrail:0000303:d3e9b834-fa7d-4746-bd80-edb85fd734ac", "row_index": 303, "timestamp": "2018-07-31T14:54:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3e9b834-fa7d-4746-bd80-edb85fd734ac", "eventTime": "2018-07-31T14:54:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-prod-pipeline", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd9150a3-f445-4790-a39a-2a8150605e1a", "record_id": "flaws_cloudtrail:0000304:cd9150a3-f445-4790-a39a-2a8150605e1a", "row_index": 304, "timestamp": "2018-07-31T14:54:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd9150a3-f445-4790-a39a-2a8150605e1a", "eventTime": "2018-07-31T14:54:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-qa-dynamodb-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "369ea07b-6601-4050-be10-437b50360b", "record_id": "flaws_cloudtrail:0000305:369ea07b-6601-4050-be10-437b50360b", "row_index": 305, "timestamp": "2018-07-31T14:54:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "369ea07b-6601-4050-be10-437b50360b", "eventTime": "2018-07-31T14:54:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-qa-pipeline", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a11f1b5-7cd6-4386-b002-3b536d02d83d", "record_id": "flaws_cloudtrail:0000306:7a11f1b5-7cd6-4386-b002-3b536d02d83d", "row_index": 306, "timestamp": "2018-07-31T14:54:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a11f1b5-7cd6-4386-b002-3b536d02d83d", "eventTime": "2018-07-31T14:54:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-resources-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0983dc56-dfa0-4a33-ae30-2589e552c8a2", "record_id": "flaws_cloudtrail:0000307:0983dc56-dfa0-4a33-ae30-2589e552c8a2", "row_index": 307, "timestamp": "2018-07-31T14:54:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0983dc56-dfa0-4a33-ae30-2589e552c8a2", "eventTime": "2018-07-31T14:54:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-resources-mergeddev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4e627c3a-9f14-4eb7-aeaa-a77194e527ae", "record_id": "flaws_cloudtrail:0000308:4e627c3a-9f14-4eb7-aeaa-a77194e527ae", "row_index": 308, "timestamp": "2018-07-31T14:54:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4e627c3a-9f14-4eb7-aeaa-a77194e527ae", "eventTime": "2018-07-31T14:54:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-resources-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e89324a-0dde-4548-a94e-e143566f940e", "record_id": "flaws_cloudtrail:0000309:5e89324a-0dde-4548-a94e-e143566f940e", "row_index": 309, "timestamp": "2018-07-31T14:54:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e89324a-0dde-4548-a94e-e143566f940e", "eventTime": "2018-07-31T14:54:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "conductor-resources-qa", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4c8e16e-81c2-460e-9036-0fc18dbdabf6", "record_id": "flaws_cloudtrail:0000310:e4c8e16e-81c2-460e-9036-0fc18dbdabf6", "row_index": 310, "timestamp": "2018-07-31T14:54:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4c8e16e-81c2-460e-9036-0fc18dbdabf6", "eventTime": "2018-07-31T14:54:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-aggregated-store", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f6d53a8-ae01-421b-825c-c042ff53bb96", "record_id": "flaws_cloudtrail:0000311:5f6d53a8-ae01-421b-825c-c042ff53bb96", "row_index": 311, "timestamp": "2018-07-31T14:54:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f6d53a8-ae01-421b-825c-c042ff53bb96", "eventTime": "2018-07-31T14:54:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-b23e46d71c1d", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9fb1029c-11e6-4719-b496-036eb44ce625", "record_id": "flaws_cloudtrail:0000312:9fb1029c-11e6-4719-b496-036eb44ce625", "row_index": 312, "timestamp": "2018-07-31T14:54:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9fb1029c-11e6-4719-b496-036eb44ce625", "eventTime": "2018-07-31T14:54:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-3046fdca61aa", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f15b41d-b1bb-4000-959c-d33152b883d5", "record_id": "flaws_cloudtrail:0000313:9f15b41d-b1bb-4000-959c-d33152b883d5", "row_index": 313, "timestamp": "2018-07-31T14:54:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f15b41d-b1bb-4000-959c-d33152b883d5", "eventTime": "2018-07-31T14:54:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-83d20ccce3a4", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5c37739-c6d2-4d29-8fcf-3055066651e0", "record_id": "flaws_cloudtrail:0000314:f5c37739-c6d2-4d29-8fcf-3055066651e0", "row_index": 314, "timestamp": "2018-07-31T14:54:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5c37739-c6d2-4d29-8fcf-3055066651e0", "eventTime": "2018-07-31T14:54:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-1232825f3995", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ef55a73-50da-4320-9e82-493a8297c828", "record_id": "flaws_cloudtrail:0000315:5ef55a73-50da-4320-9e82-493a8297c828", "row_index": 315, "timestamp": "2018-07-31T14:54:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ef55a73-50da-4320-9e82-493a8297c828", "eventTime": "2018-07-31T14:54:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-8959b33094de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b48019-63c6-4450-932d-124799562b09", "record_id": "flaws_cloudtrail:0000316:5b48019-63c6-4450-932d-124799562b09", "row_index": 316, "timestamp": "2018-07-31T14:55:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b48019-63c6-4450-932d-124799562b09", "eventTime": "2018-07-31T14:55:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-7b8d0ba0f677", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96b0be0e-5c79-4eac-ac48-3c5a012497d9", "record_id": "flaws_cloudtrail:0000317:96b0be0e-5c79-4eac-ac48-3c5a012497d9", "row_index": 317, "timestamp": "2018-07-31T14:55:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96b0be0e-5c79-4eac-ac48-3c5a012497d9", "eventTime": "2018-07-31T14:55:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-b2e657d35092", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a4bf4d6-9a97-4596-8f2c-d73abe098ca0", "record_id": "flaws_cloudtrail:0000318:7a4bf4d6-9a97-4596-8f2c-d73abe098ca0", "row_index": 318, "timestamp": "2018-07-31T14:55:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a4bf4d6-9a97-4596-8f2c-d73abe098ca0", "eventTime": "2018-07-31T14:55:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "confluent-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21dbc750-04ba-4e3c-a810-d722196e08b", "record_id": "flaws_cloudtrail:0000319:21dbc750-04ba-4e3c-a810-d722196e08b", "row_index": 319, "timestamp": "2018-07-31T14:55:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21dbc750-04ba-4e3c-a810-d722196e08b", "eventTime": "2018-07-31T14:55:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-aechipping-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "688f9237-90aa-4edd-b495-5e16d773189f7", "record_id": "flaws_cloudtrail:0000320:688f9237-90aa-4edd-b495-5e16d773189f7", "row_index": 320, "timestamp": "2018-07-31T14:55:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "688f9237-90aa-4edd-b495-5e16d773189f7", "eventTime": "2018-07-31T14:55:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-api-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91bdc1df-b77e-4a14-a45f-b8d26526f62e", "record_id": "flaws_cloudtrail:0000321:91bdc1df-b77e-4a14-a45f-b8d26526f62e", "row_index": 321, "timestamp": "2018-07-31T14:55:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91bdc1df-b77e-4a14-a45f-b8d26526f62e", "eventTime": "2018-07-31T14:55:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-bulk-upload", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d8d4b2f-e807-4e40-b1c3-222f16ae236f", "record_id": "flaws_cloudtrail:0000322:9d8d4b2f-e807-4e40-b1c3-222f16ae236f", "row_index": 322, "timestamp": "2018-07-31T14:55:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d8d4b2f-e807-4e40-b1c3-222f16ae236f", "eventTime": "2018-07-31T14:55:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-bulk-upload-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da3e4e53-841c-4b4a-9351-28e01f8be424", "record_id": "flaws_cloudtrail:0000323:da3e4e53-841c-4b4a-9351-28e01f8be424", "row_index": 323, "timestamp": "2018-07-31T14:55:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da3e4e53-841c-4b4a-9351-28e01f8be424", "eventTime": "2018-07-31T14:55:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-earimager-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0db984685-e60f-4c2a-888a-d8daa83d6626", "record_id": "flaws_cloudtrail:0000324:0db984685-e60f-4c2a-888a-d8daa83d6626", "row_index": 324, "timestamp": "2018-07-31T14:55:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0db984685-e60f-4c2a-888a-d8daa83d6626", "eventTime": "2018-07-31T14:55:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-earimagertest", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d4cbda1-10b7-4025-815e-69956b40429f", "record_id": "flaws_cloudtrail:0000325:8d4cbda1-10b7-4025-815e-69956b40429f", "row_index": 325, "timestamp": "2018-07-31T14:55:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d4cbda1-10b7-4025-815e-69956b40429f", "eventTime": "2018-07-31T14:55:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-fdgateway-gps-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17d5e7de-6361-439c-8be7-964331ae70e16", "record_id": "flaws_cloudtrail:0000326:17d5e7de-6361-439c-8be7-964331ae70e16", "row_index": 326, "timestamp": "2018-07-31T14:55:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17d5e7de-6361-439c-8be7-964331ae70e16", "eventTime": "2018-07-31T14:55:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-flexfiller-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e7f6e56-bebd-4066-b625-a84cd89b1f83", "record_id": "flaws_cloudtrail:0000327:3e7f6e56-bebd-4066-b625-a84cd89b1f83", "row_index": 327, "timestamp": "2018-07-31T14:55:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e7f6e56-bebd-4066-b625-a84cd89b1f83", "eventTime": "2018-07-31T14:55:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-reaperprod-harvestedplot-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8d1d11c6-ec47-490e-abdc-cb5c1b9bd4f2", "record_id": "flaws_cloudtrail:0000328:8d1d11c6-ec47-490e-abdc-cb5c1b9bd4f2", "row_index": 328, "timestamp": "2018-07-31T14:55:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8d1d11c6-ec47-490e-abdc-cb5c1b9bd4f2", "eventTime": "2018-07-31T14:55:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-reaperprod-operating-event-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48580a2d-5bdb-4ec3-9849-997c38b48840", "record_id": "flaws_cloudtrail:0000329:48580a2d-5bdb-4ec3-9849-997c38b48840", "row_index": 329, "timestamp": "2018-07-31T14:55:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48580a2d-5bdb-4ec3-9849-997c38b48840", "eventTime": "2018-07-31T14:55:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-reaperprod-operating-event-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a65fc719-4b88-435d-b713-6fdb947b2a15", "record_id": "flaws_cloudtrail:0000330:a65fc719-4b88-435d-b713-6fdb947b2a15", "row_index": 330, "timestamp": "2018-07-31T14:55:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a65fc719-4b88-435d-b713-6fdb947b2a15", "eventTime": "2018-07-31T14:55:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-reaperprod-plot-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05ba940c-7c8a-4855-8ef7-cfa467093eee", "record_id": "flaws_cloudtrail:0000331:05ba940c-7c8a-4855-8ef7-cfa467093eee", "row_index": 331, "timestamp": "2018-07-31T14:55:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05ba940c-7c8a-4855-8ef7-cfa467093eee", "eventTime": "2018-07-31T14:55:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-reaperprod-plot-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5de4edaf-4c9d-4804-b053-9b773d88b182", "record_id": "flaws_cloudtrail:0000332:5de4edaf-4c9d-4804-b053-9b773d88b182", "row_index": 332, "timestamp": "2018-07-31T14:55:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5de4edaf-4c9d-4804-b053-9b773d88b182", "eventTime": "2018-07-31T14:55:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-redwingplanter-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44badc9d-4a49-427e-95da-dab7739b91b2", "record_id": "flaws_cloudtrail:0000333:44badc9d-4a49-427e-95da-dab7739b91b2", "row_index": 333, "timestamp": "2018-07-31T14:55:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44badc9d-4a49-427e-95da-dab7739b91b2", "eventTime": "2018-07-31T14:55:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-shellmatic", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a95cd5d5-667d-48b2-9bbc-be2da2e779be", "record_id": "flaws_cloudtrail:0000334:a95cd5d5-667d-48b2-9bbc-be2da2e779be", "row_index": 334, "timestamp": "2018-07-31T14:55:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a95cd5d5-667d-48b2-9bbc-be2da2e779be", "eventTime": "2018-07-31T14:55:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-shellmatictest", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "555a0863-04d1-4a8b-9a8d-a886b9495391", "record_id": "flaws_cloudtrail:0000335:555a0863-04d1-4a8b-9a8d-a886b9495391", "row_index": 335, "timestamp": "2018-07-31T14:55:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "555a0863-04d1-4a8b-9a8d-a886b9495391", "eventTime": "2018-07-31T14:55:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-ui-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "699076c73-3f6b-41c7-ba39-780bf0fc51cc", "record_id": "flaws_cloudtrail:0000336:699076c73-3f6b-41c7-ba39-780bf0fc51cc", "row_index": 336, "timestamp": "2018-07-31T14:55:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "699076c73-3f6b-41c7-ba39-780bf0fc51cc", "eventTime": "2018-07-31T14:55:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "connect-vmektest", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b08b1b97-ceb0-4d9d-a907-8f151782df6e", "record_id": "flaws_cloudtrail:0000337:b08b1b97-ceb0-4d9d-a907-8f151782df6e", "row_index": 337, "timestamp": "2018-07-31T14:55:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b08b1b97-ceb0-4d9d-a907-8f151782df6e", "eventTime": "2018-07-31T14:55:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cornpackplan", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4119eec9-b14b-4f8d-9b14-a6dd9567af79", "record_id": "flaws_cloudtrail:0000338:4119eec9-b14b-4f8d-9b14-a6dd9567af79", "row_index": 338, "timestamp": "2018-07-31T14:55:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4119eec9-b14b-4f8d-9b14-a6dd9567af79", "eventTime": "2018-07-31T14:55:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cosmos-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "656b30a8-cc2c-448d-bf84-7af204bdedf2", "record_id": "flaws_cloudtrail:0000339:656b30a8-cc2c-448d-bf84-7af204bdedf2", "row_index": 339, "timestamp": "2018-07-31T14:55:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "656b30a8-cc2c-448d-bf84-7af204bdedf2", "eventTime": "2018-07-31T14:55:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "cosmos-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6710b282-9e5d-4531-aa5a-bbaf800f24b9", "record_id": "flaws_cloudtrail:0000340:6710b282-9e5d-4531-aa5a-bbaf800f24b9", "row_index": 340, "timestamp": "2018-07-31T14:55:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6710b282-9e5d-4531-aa5a-bbaf800f24b9", "eventTime": "2018-07-31T14:55:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "crossfire-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aad6fcc2-1249-422c-8711-f3bba1392e84", "record_id": "flaws_cloudtrail:0000341:aad6fcc2-1249-422c-8711-f3bba1392e84", "row_index": 341, "timestamp": "2018-07-31T14:55:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aad6fcc2-1249-422c-8711-f3bba1392e84", "eventTime": "2018-07-31T14:55:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "crossfire-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "176366ee-35e0-487b-856d-14c8ed2225cb", "record_id": "flaws_cloudtrail:0000342:176366ee-35e0-487b-856d-14c8ed2225cb", "row_index": 342, "timestamp": "2018-07-31T14:55:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "176366ee-35e0-487b-856d-14c8ed2225cb", "eventTime": "2018-07-31T14:55:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "crusher-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19045-ffe9-4e6b-8819-a13100f7925", "record_id": "flaws_cloudtrail:0000343:19045-ffe9-4e6b-8819-a13100f7925", "row_index": 343, "timestamp": "2018-07-31T14:55:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19045-ffe9-4e6b-8819-a13100f7925", "eventTime": "2018-07-31T14:55:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "crusher-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49ad1014-b005-41cf-bd6e-e011ac9d03b0", "record_id": "flaws_cloudtrail:0000344:49ad1014-b005-41cf-bd6e-e011ac9d03b0", "row_index": 344, "timestamp": "2018-07-31T14:55:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49ad1014-b005-41cf-bd6e-e011ac9d03b0", "eventTime": "2018-07-31T14:55:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "crusher-us-east-2-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "381a2c68-f95f-4bb3-9de2-42dd479600fc", "record_id": "flaws_cloudtrail:0000345:381a2c68-f95f-4bb3-9de2-42dd479600fc", "row_index": 345, "timestamp": "2018-07-31T14:55:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "381a2c68-f95f-4bb3-9de2-42dd479600fc", "eventTime": "2018-07-31T14:55:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "customer-pricing", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c824af75-b535-44d0-b539-a08607e5", "record_id": "flaws_cloudtrail:0000346:c824af75-b535-44d0-b539-a08607e5", "row_index": 346, "timestamp": "2018-07-31T14:55:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c824af75-b535-44d0-b539-a08607e5", "eventTime": "2018-07-31T14:55:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "customer-pricing-role-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a74a50cd-3d30-40e6-8630-2238c5a35599", "record_id": "flaws_cloudtrail:0000347:a74a50cd-3d30-40e6-8630-2238c5a35599", "row_index": 347, "timestamp": "2018-07-31T14:55:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a74a50cd-3d30-40e6-8630-2238c5a35599", "eventTime": "2018-07-31T14:55:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "customer360-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a44220a7-fc0a-4f3d-acb5-31ce236bc37e", "record_id": "flaws_cloudtrail:0000348:a44220a7-fc0a-4f3d-acb5-31ce236bc37e", "row_index": 348, "timestamp": "2018-07-31T14:55:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a44220a7-fc0a-4f3d-acb5-31ce236bc37e", "eventTime": "2018-07-31T14:55:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "customer360-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e093e837-3ab5-4743-ad8c-6542bf265d33", "record_id": "flaws_cloudtrail:0000349:e093e837-3ab5-4743-ad8c-6542bf265d33", "row_index": 349, "timestamp": "2018-07-31T14:55:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e093e837-3ab5-4743-ad8c-6542bf265d33", "eventTime": "2018-07-31T14:55:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "d9-prod-serverlessdeploymentbucket-dxh3elzg63mv", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6df8603-731a-43a3-9b5c-1b654d66d5de", "record_id": "flaws_cloudtrail:0000350:e6df8603-731a-43a3-9b5c-1b654d66d5de", "row_index": 350, "timestamp": "2018-07-31T14:55:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6df8603-731a-43a3-9b5c-1b654d66d5de", "eventTime": "2018-07-31T14:55:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "darre-my-service-test-de-serverlessdeploymentbuck-14iq3krrcuns3", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "deaeb16b-802c-4064-b136-3e8cc5b6a2c8", "record_id": "flaws_cloudtrail:0000351:deaeb16b-802c-4064-b136-3e8cc5b6a2c8", "row_index": 351, "timestamp": "2018-07-31T14:55:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "deaeb16b-802c-4064-b136-3e8cc5b6a2c8", "eventTime": "2018-07-31T14:55:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "darre-my-service-test-de-serverlessdeploymentbuck-1h6m05elhg6qs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbc4eb88-c3c7-4bcc-ac74-d8896ad27525", "record_id": "flaws_cloudtrail:0000352:dbc4eb88-c3c7-4bcc-ac74-d8896ad27525", "row_index": 352, "timestamp": "2018-07-31T14:55:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbc4eb88-c3c7-4bcc-ac74-d8896ad27525", "eventTime": "2018-07-31T14:55:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "darthvendor-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ce4f07f-b608-49cb-b219-e77878d12d6", "record_id": "flaws_cloudtrail:0000353:5ce4f07f-b608-49cb-b219-e77878d12d6", "row_index": 353, "timestamp": "2018-07-31T14:55:47Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "179.152.1.74", "user_agent": "[aws-cli/1.15.67 Python/2.7.15 Darwin/17.7.0 botocore/1.10.66]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 642, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ce4f07f-b608-49cb-b219-e77878d12d6", "eventTime": "2018-07-31T14:55:47Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "179.152.1.74", "userAgent": "[aws-cli/1.15.67 Python/2.7.15 Darwin/17.7.0 botocore/1.10.66]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c668dd4-2526-4d10-840d-b4cd20b53b78", "record_id": "flaws_cloudtrail:0000354:6c668dd4-2526-4d10-840d-b4cd20b53b78", "row_index": 354, "timestamp": "2018-07-31T14:55:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c668dd4-2526-4d10-840d-b4cd20b53b78", "eventTime": "2018-07-31T14:55:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-360-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "438747b6-923a-46aa-8d44-b7f3abe8d3d2", "record_id": "flaws_cloudtrail:0000355:438747b6-923a-46aa-8d44-b7f3abe8d3d2", "row_index": 355, "timestamp": "2018-07-31T14:55:48Z", "event_type": "DescribeKeyPairs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 527, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "438747b6-923a-46aa-8d44-b7f3abe8d3d2", "eventTime": "2018-07-31T14:55:48Z", "eventName": "DescribeKeyPairs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1b73d92-7805-4029-b315-751979e49a5", "record_id": "flaws_cloudtrail:0000356:d1b73d92-7805-4029-b315-751979e49a5", "row_index": 356, "timestamp": "2018-07-31T14:55:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1b73d92-7805-4029-b315-751979e49a5", "eventTime": "2018-07-31T14:55:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-360-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da503fa6-f24a-4d34-b874-025fe1ab771b", "record_id": "flaws_cloudtrail:0000357:da503fa6-f24a-4d34-b874-025fe1ab771b", "row_index": 357, "timestamp": "2018-07-31T14:55:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da503fa6-f24a-4d34-b874-025fe1ab771b", "eventTime": "2018-07-31T14:55:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-api-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66ee6d78-decf-4742-b586-e12d09a3e35f", "record_id": "flaws_cloudtrail:0000358:66ee6d78-decf-4742-b586-e12d09a3e35f", "row_index": 358, "timestamp": "2018-07-31T14:55:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66ee6d78-decf-4742-b586-e12d09a3e35f", "eventTime": "2018-07-31T14:55:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e50d2352-2547-4057-a01b-73930a0ac3be", "record_id": "flaws_cloudtrail:0000359:e50d2352-2547-4057-a01b-73930a0ac3be", "row_index": 359, "timestamp": "2018-07-31T14:55:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e50d2352-2547-4057-a01b-73930a0ac3be", "eventTime": "2018-07-31T14:55:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-np-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96a664fb-1a79-441c-89ab-4ccc8e992500", "record_id": "flaws_cloudtrail:0000360:96a664fb-1a79-441c-89ab-4ccc8e992500", "row_index": 360, "timestamp": "2018-07-31T14:55:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96a664fb-1a79-441c-89ab-4ccc8e992500", "eventTime": "2018-07-31T14:55:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-np-lambda-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e1ea1ae-977a-4b3d-88c8-248788b48", "record_id": "flaws_cloudtrail:0000361:6e1ea1ae-977a-4b3d-88c8-248788b48", "row_index": 361, "timestamp": "2018-07-31T14:55:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e1ea1ae-977a-4b3d-88c8-248788b48", "eventTime": "2018-07-31T14:55:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-prd", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66836-86ad-4360-80af-eaff6fc05b1f", "record_id": "flaws_cloudtrail:0000362:66836-86ad-4360-80af-eaff6fc05b1f", "row_index": 362, "timestamp": "2018-07-31T14:55:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66836-86ad-4360-80af-eaff6fc05b1f", "eventTime": "2018-07-31T14:55:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-prd-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8318e4fc-421b-4a74-a871-d132277", "record_id": "flaws_cloudtrail:0000363:8318e4fc-421b-4a74-a871-d132277", "row_index": 363, "timestamp": "2018-07-31T14:55:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8318e4fc-421b-4a74-a871-d132277", "eventTime": "2018-07-31T14:55:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13f79a3f-61e1-4e25-bae6-b832c1edcc3c", "record_id": "flaws_cloudtrail:0000364:13f79a3f-61e1-4e25-bae6-b832c1edcc3c", "row_index": 364, "timestamp": "2018-07-31T14:56:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13f79a3f-61e1-4e25-bae6-b832c1edcc3c", "eventTime": "2018-07-31T14:56:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfc20d3f-f101-4d59-90aa-d44cb1dd954f", "record_id": "flaws_cloudtrail:0000365:dfc20d3f-f101-4d59-90aa-d44cb1dd954f", "row_index": 365, "timestamp": "2018-07-31T14:56:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfc20d3f-f101-4d59-90aa-d44cb1dd954f", "eventTime": "2018-07-31T14:56:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-historian-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f364b967-b9c6-4cc5-b54d-afcba53bc7b6", "record_id": "flaws_cloudtrail:0000366:f364b967-b9c6-4cc5-b54d-afcba53bc7b6", "row_index": 366, "timestamp": "2018-07-31T14:56:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f364b967-b9c6-4cc5-b54d-afcba53bc7b6", "eventTime": "2018-07-31T14:56:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-ingestion-api-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ed94cce-3a1d-4681-bd11-aaea5d5482ca", "record_id": "flaws_cloudtrail:0000367:1ed94cce-3a1d-4681-bd11-aaea5d5482ca", "row_index": 367, "timestamp": "2018-07-31T14:56:02Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "179.152.1.74", "user_agent": "[aws-cli/1.15.67 Python/2.7.15 Darwin/17.7.0 botocore/1.10.66]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 643, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ed94cce-3a1d-4681-bd11-aaea5d5482ca", "eventTime": "2018-07-31T14:56:02Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "179.152.1.74", "userAgent": "[aws-cli/1.15.67 Python/2.7.15 Darwin/17.7.0 botocore/1.10.66]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56008e7c-17c5-4a59-94b7-fb6307a717e3", "record_id": "flaws_cloudtrail:0000368:56008e7c-17c5-4a59-94b7-fb6307a717e3", "row_index": 368, "timestamp": "2018-07-31T14:56:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56008e7c-17c5-4a59-94b7-fb6307a717e3", "eventTime": "2018-07-31T14:56:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-ingestion-api-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0eca2cc-f552-4f94-947b-7deecef83eb1", "record_id": "flaws_cloudtrail:0000369:c0eca2cc-f552-4f94-947b-7deecef83eb1", "row_index": 369, "timestamp": "2018-07-31T14:56:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0eca2cc-f552-4f94-947b-7deecef83eb1", "eventTime": "2018-07-31T14:56:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-science-ci-poc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "505892eef-386e-4dd0-980d-f104bac12f3a", "record_id": "flaws_cloudtrail:0000370:505892eef-386e-4dd0-980d-f104bac12f3a", "row_index": 370, "timestamp": "2018-07-31T14:56:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "505892eef-386e-4dd0-980d-f104bac12f3a", "eventTime": "2018-07-31T14:56:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-science-ci-poc-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65be8553-7f52-41a3-a883-e36d62df918f", "record_id": "flaws_cloudtrail:0000371:65be8553-7f52-41a3-a883-e36d62df918f", "row_index": 371, "timestamp": "2018-07-31T14:56:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65be8553-7f52-41a3-a883-e36d62df918f", "eventTime": "2018-07-31T14:56:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-stewardship", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "980076c66-1b70-425a-95e8-5a9e7decc757", "record_id": "flaws_cloudtrail:0000372:980076c66-1b70-425a-95e8-5a9e7decc757", "row_index": 372, "timestamp": "2018-07-31T14:56:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "980076c66-1b70-425a-95e8-5a9e7decc757", "eventTime": "2018-07-31T14:56:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-stewardship-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a5b6cf7-ca2a-49d4-ae08-a27a2d6d93a2", "record_id": "flaws_cloudtrail:0000373:4a5b6cf7-ca2a-49d4-ae08-a27a2d6d93a2", "row_index": 373, "timestamp": "2018-07-31T14:56:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a5b6cf7-ca2a-49d4-ae08-a27a2d6d93a2", "eventTime": "2018-07-31T14:56:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-stewardship-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed1169f7-9627-4823-9b0c-f9ee8153da96", "record_id": "flaws_cloudtrail:0000374:ed1169f7-9627-4823-9b0c-f9ee8153da96", "row_index": 374, "timestamp": "2018-07-31T14:56:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed1169f7-9627-4823-9b0c-f9ee8153da96", "eventTime": "2018-07-31T14:56:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data-stewardship-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a383f7b-dbb6-454a-80be-7f73ad85ca64", "record_id": "flaws_cloudtrail:0000375:9a383f7b-dbb6-454a-80be-7f73ad85ca64", "row_index": 375, "timestamp": "2018-07-31T14:56:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a383f7b-dbb6-454a-80be-7f73ad85ca64", "eventTime": "2018-07-31T14:56:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data360-perm-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3efe669-6dac-4dea-9b95-906a6b88614b", "record_id": "flaws_cloudtrail:0000376:a3efe669-6dac-4dea-9b95-906a6b88614b", "row_index": 376, "timestamp": "2018-07-31T14:56:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3efe669-6dac-4dea-9b95-906a6b88614b", "eventTime": "2018-07-31T14:56:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "data360-scratch-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c54dc5da-332c-421d-830e-625d7f194ac2", "record_id": "flaws_cloudtrail:0000377:c54dc5da-332c-421d-830e-625d7f194ac2", "row_index": 377, "timestamp": "2018-07-31T14:56:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c54dc5da-332c-421d-830e-625d7f194ac2", "eventTime": "2018-07-31T14:56:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "datahub-public-repo", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a99098-113e-4b30-989d-ddcc08d9de32", "record_id": "flaws_cloudtrail:0000378:a99098-113e-4b30-989d-ddcc08d9de32", "row_index": 378, "timestamp": "2018-07-31T14:56:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a99098-113e-4b30-989d-ddcc08d9de32", "eventTime": "2018-07-31T14:56:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "datahub-sap", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5270ff5-9d3d-4fd3-a9f3-23bdbda4379b", "record_id": "flaws_cloudtrail:0000379:d5270ff5-9d3d-4fd3-a9f3-23bdbda4379b", "row_index": 379, "timestamp": "2018-07-31T14:56:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5270ff5-9d3d-4fd3-a9f3-23bdbda4379b", "eventTime": "2018-07-31T14:56:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "datasvc-bale-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76b296b3-1c3a-4376-914a-2254d1d719fb", "record_id": "flaws_cloudtrail:0000380:76b296b3-1c3a-4376-914a-2254d1d719fb", "row_index": 380, "timestamp": "2018-07-31T14:56:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76b296b3-1c3a-4376-914a-2254d1d719fb", "eventTime": "2018-07-31T14:56:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "datasvc-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ee29a5b-a735-47c7-87f4-87f3dc804d85", "record_id": "flaws_cloudtrail:0000381:4ee29a5b-a735-47c7-87f4-87f3dc804d85", "row_index": 381, "timestamp": "2018-07-31T14:56:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ee29a5b-a735-47c7-87f4-87f3dc804d85", "eventTime": "2018-07-31T14:56:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "datasvc-cloudtrail-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e05267-8323-4d77-a765-756eea2db4d0", "record_id": "flaws_cloudtrail:0000382:e05267-8323-4d77-a765-756eea2db4d0", "row_index": 382, "timestamp": "2018-07-31T14:56:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e05267-8323-4d77-a765-756eea2db4d0", "eventTime": "2018-07-31T14:56:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "datasvc-logvaulter-sbx", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d57da905-01ee-4cce-8a5f-c41f5ff1d6d6", "record_id": "flaws_cloudtrail:0000383:d57da905-01ee-4cce-8a5f-c41f5ff1d6d6", "row_index": 383, "timestamp": "2018-07-31T14:56:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d57da905-01ee-4cce-8a5f-c41f5ff1d6d6", "eventTime": "2018-07-31T14:56:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "datasvc-staging-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d3ac7ab-8b27-4cf6-a583-944a9bd6b389", "record_id": "flaws_cloudtrail:0000384:5d3ac7ab-8b27-4cf6-a583-944a9bd6b389", "row_index": 384, "timestamp": "2018-07-31T14:56:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d3ac7ab-8b27-4cf6-a583-944a9bd6b389", "eventTime": "2018-07-31T14:56:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dataviz-tst", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f492d38-80aa-4d26-905c-1043856aec0e", "record_id": "flaws_cloudtrail:0000385:8f492d38-80aa-4d26-905c-1043856aec0e", "row_index": 385, "timestamp": "2018-07-31T14:56:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f492d38-80aa-4d26-905c-1043856aec0e", "eventTime": "2018-07-31T14:56:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dataviz.loc360-np.monsanto.net", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1a826df-c81e-4b19-bc96-d9dd5131aa0b", "record_id": "flaws_cloudtrail:0000386:f1a826df-c81e-4b19-bc96-d9dd5131aa0b", "row_index": 386, "timestamp": "2018-07-31T14:56:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1a826df-c81e-4b19-bc96-d9dd5131aa0b", "eventTime": "2018-07-31T14:56:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "davinci-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af4d192d-612e-41b2-86d9-d44a3df4de2f", "record_id": "flaws_cloudtrail:0000387:af4d192d-612e-41b2-86d9-d44a3df4de2f", "row_index": 387, "timestamp": "2018-07-31T14:56:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af4d192d-612e-41b2-86d9-d44a3df4de2f", "eventTime": "2018-07-31T14:56:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "davinci-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c13b2a0-eeb5-4260-9ee2-40408dc4d90", "record_id": "flaws_cloudtrail:0000388:1c13b2a0-eeb5-4260-9ee2-40408dc4d90", "row_index": 388, "timestamp": "2018-07-31T14:56:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c13b2a0-eeb5-4260-9ee2-40408dc4d90", "eventTime": "2018-07-31T14:56:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ddfclogs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe8fa50-b714-4cf0-b9d1-2ca9feb9fc89", "record_id": "flaws_cloudtrail:0000389:2fe8fa50-b714-4cf0-b9d1-2ca9feb9fc89", "row_index": 389, "timestamp": "2018-07-31T14:56:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe8fa50-b714-4cf0-b9d1-2ca9feb9fc89", "eventTime": "2018-07-31T14:56:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "deeplens-sagemaker-0f71ff4c-9f17-45de-9098-51c55d2cbda9", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ad55ce7-8fed-41d8-bfc4-d4e13638fc63", "record_id": "flaws_cloudtrail:0000390:2ad55ce7-8fed-41d8-bfc4-d4e13638fc63", "row_index": 390, "timestamp": "2018-07-31T14:56:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ad55ce7-8fed-41d8-bfc4-d4e13638fc63", "eventTime": "2018-07-31T14:56:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "deeplens-sagemaker-edffa434-af17-4705-a5ee-f3369bb5c516", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c41baa71-f8a0-4c91-9860-cc1c82086", "record_id": "flaws_cloudtrail:0000391:c41baa71-f8a0-4c91-9860-cc1c82086", "row_index": 391, "timestamp": "2018-07-31T14:56:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c41baa71-f8a0-4c91-9860-cc1c82086", "eventTime": "2018-07-31T14:56:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "deeplens-sagemaker-jay-silverman", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cca98b9-9572-4635-a272-e37c021125f80", "record_id": "flaws_cloudtrail:0000392:7cca98b9-9572-4635-a272-e37c021125f80", "row_index": 392, "timestamp": "2018-07-31T14:56:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cca98b9-9572-4635-a272-e37c021125f80", "eventTime": "2018-07-31T14:56:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "deeplens-sagemaker-sanjay-shrestha", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a74628-d335-4ae6-b6e3-7c05e9c572f4", "record_id": "flaws_cloudtrail:0000393:b0a74628-d335-4ae6-b6e3-7c05e9c572f4", "row_index": 393, "timestamp": "2018-07-31T14:56:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a74628-d335-4ae6-b6e3-7c05e9c572f4", "eventTime": "2018-07-31T14:56:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "demeter-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b039807-893a-48bd-86ab-d2e1d95daac3", "record_id": "flaws_cloudtrail:0000394:4b039807-893a-48bd-86ab-d2e1d95daac3", "row_index": 394, "timestamp": "2018-07-31T14:56:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b039807-893a-48bd-86ab-d2e1d95daac3", "eventTime": "2018-07-31T14:56:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "demeter-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41f1eb4c-0611-459e-8d33-f6420c5b720c", "record_id": "flaws_cloudtrail:0000395:41f1eb4c-0611-459e-8d33-f6420c5b720c", "row_index": 395, "timestamp": "2018-07-31T14:56:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41f1eb4c-0611-459e-8d33-f6420c5b720c", "eventTime": "2018-07-31T14:56:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "deployment-approvals-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81f71d4c-0dbd-41a5-80f7-ac717888a", "record_id": "flaws_cloudtrail:0000396:81f71d4c-0dbd-41a5-80f7-ac717888a", "row_index": 396, "timestamp": "2018-07-31T14:56:43Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "179.152.1.74", "user_agent": "aws-cli/1.15.67 Python/2.7.15 Darwin/17.7.0 botocore/1.10.66", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81f71d4c-0dbd-41a5-80f7-ac717888a", "eventTime": "2018-07-31T14:56:43Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "179.152.1.74", "userAgent": "aws-cli/1.15.67 Python/2.7.15 Darwin/17.7.0 botocore/1.10.66", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ee414c9-4759-4a7f-b114-dd237a96c5af", "record_id": "flaws_cloudtrail:0000397:6ee414c9-4759-4a7f-b114-dd237a96c5af", "row_index": 397, "timestamp": "2018-07-31T14:56:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ee414c9-4759-4a7f-b114-dd237a96c5af", "eventTime": "2018-07-31T14:56:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "deployment-approvals-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0aa352d1-619f-438d-a06a-a26ce70a32ec", "record_id": "flaws_cloudtrail:0000398:0aa352d1-619f-438d-a06a-a26ce70a32ec", "row_index": 398, "timestamp": "2018-07-31T14:56:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0aa352d1-619f-438d-a06a-a26ce70a32ec", "eventTime": "2018-07-31T14:56:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-conductor-external-outbound", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9863a3ec-e3b0-43d2-b98f-319c56f4e473", "record_id": "flaws_cloudtrail:0000399:9863a3ec-e3b0-43d2-b98f-319c56f4e473", "row_index": 399, "timestamp": "2018-07-31T14:56:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9863a3ec-e3b0-43d2-b98f-319c56f4e473", "eventTime": "2018-07-31T14:56:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-datadriven-1.0", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b534a63-940b-4351-b2ab-cf4f61bf5c94", "record_id": "flaws_cloudtrail:0000400:4b534a63-940b-4351-b2ab-cf4f61bf5c94", "row_index": 400, "timestamp": "2018-07-31T14:56:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b534a63-940b-4351-b2ab-cf4f61bf5c94", "eventTime": "2018-07-31T14:56:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-datadriventypes", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6e769f8-c759-4976-9491-cffe054d1488", "record_id": "flaws_cloudtrail:0000401:c6e769f8-c759-4976-9491-cffe054d1488", "row_index": 401, "timestamp": "2018-07-31T14:56:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6e769f8-c759-4976-9491-cffe054d1488", "eventTime": "2018-07-31T14:56:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-datadrivenworkflow", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df694cc4-1b12-435d-96bf-e502d9007508", "record_id": "flaws_cloudtrail:0000402:df694cc4-1b12-435d-96bf-e502d9007508", "row_index": 402, "timestamp": "2018-07-31T14:56:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df694cc4-1b12-435d-96bf-e502d9007508", "eventTime": "2018-07-31T14:56:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-imagine-cancelled", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e6fd4a5-152d-4e19-85ee-039be4897522", "record_id": "flaws_cloudtrail:0000403:6e6fd4a5-152d-4e19-85ee-039be4897522", "row_index": 403, "timestamp": "2018-07-31T14:56:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e6fd4a5-152d-4e19-85ee-039be4897522", "eventTime": "2018-07-31T14:56:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-imagine-raw", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93787c6b-f62b-4894-b92c-b9b5487f998e", "record_id": "flaws_cloudtrail:0000404:93787c6b-f62b-4894-b92c-b9b5487f998e", "row_index": 404, "timestamp": "2018-07-31T14:56:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93787c6b-f62b-4894-b92c-b9b5487f998e", "eventTime": "2018-07-31T14:56:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-manager-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a25d8a2e-4f1a-4156-80f4-c0b8f3cf0776", "record_id": "flaws_cloudtrail:0000405:a25d8a2e-4f1a-4156-80f4-c0b8f3cf0776", "row_index": 405, "timestamp": "2018-07-31T14:56:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a25d8a2e-4f1a-4156-80f4-c0b8f3cf0776", "eventTime": "2018-07-31T14:56:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-manager-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a1bfb8f-2656-4bf4-8b4c-febc10e40eae", "record_id": "flaws_cloudtrail:0000406:3a1bfb8f-2656-4bf4-8b4c-febc10e40eae", "row_index": 406, "timestamp": "2018-07-31T14:56:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a1bfb8f-2656-4bf4-8b4c-febc10e40eae", "eventTime": "2018-07-31T14:56:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-mediawiki-cf-templates", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "736594a67-57f2-47cb-961f-38f9b2bd593e", "record_id": "flaws_cloudtrail:0000407:736594a67-57f2-47cb-961f-38f9b2bd593e", "row_index": 407, "timestamp": "2018-07-31T14:56:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "736594a67-57f2-47cb-961f-38f9b2bd593e", "eventTime": "2018-07-31T14:56:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-mediawiki-resources", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c48adbb-2eb3-4559-a9d6-131c43e0e170", "record_id": "flaws_cloudtrail:0000408:4c48adbb-2eb3-4559-a9d6-131c43e0e170", "row_index": 408, "timestamp": "2018-07-31T14:56:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c48adbb-2eb3-4559-a9d6-131c43e0e170", "eventTime": "2018-07-31T14:56:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-mergeddev-pim-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33688-984c-4d9c-b4a4-e1042dbaf065", "record_id": "flaws_cloudtrail:0000409:33688-984c-4d9c-b4a4-e1042dbaf065", "row_index": 409, "timestamp": "2018-07-31T14:56:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33688-984c-4d9c-b4a4-e1042dbaf065", "eventTime": "2018-07-31T14:56:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-pim-cf-templates", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c38c017d-dafa-40f5-9bbf-7ede4632af67", "record_id": "flaws_cloudtrail:0000410:c38c017d-dafa-40f5-9bbf-7ede4632af67", "row_index": 410, "timestamp": "2018-07-31T14:57:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c38c017d-dafa-40f5-9bbf-7ede4632af67", "eventTime": "2018-07-31T14:57:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-pim-elb-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34381e28-5dd1-482b-a831-0361f4d9360a", "record_id": "flaws_cloudtrail:0000411:34381e28-5dd1-482b-a831-0361f4d9360a", "row_index": 411, "timestamp": "2018-07-31T14:57:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34381e28-5dd1-482b-a831-0361f4d9360a", "eventTime": "2018-07-31T14:57:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev-pim-resources", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "162480c9-f1a7-41de-b205-38b1e24fc950", "record_id": "flaws_cloudtrail:0000412:162480c9-f1a7-41de-b205-38b1e24fc950", "row_index": 412, "timestamp": "2018-07-31T14:57:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "162480c9-f1a7-41de-b205-38b1e24fc950", "eventTime": "2018-07-31T14:57:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dev.com.intelex.goal.claims.attachments", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb595a4c-d956-447f-b243-2f7e0974a86e", "record_id": "flaws_cloudtrail:0000413:eb595a4c-d956-447f-b243-2f7e0974a86e", "row_index": 413, "timestamp": "2018-07-31T14:57:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb595a4c-d956-447f-b243-2f7e0974a86e", "eventTime": "2018-07-31T14:57:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "devices-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "329fef84-6c51-4eb8-b4ed-3782b35c0f60", "record_id": "flaws_cloudtrail:0000414:329fef84-6c51-4eb8-b4ed-3782b35c0f60", "row_index": 414, "timestamp": "2018-07-31T14:57:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "329fef84-6c51-4eb8-b4ed-3782b35c0f60", "eventTime": "2018-07-31T14:57:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "devopsactivity", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90dec282-e2a1-4ae1-a00d-c815e9e793fa", "record_id": "flaws_cloudtrail:0000415:90dec282-e2a1-4ae1-a00d-c815e9e793fa", "row_index": 415, "timestamp": "2018-07-31T14:57:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90dec282-e2a1-4ae1-a00d-c815e9e793fa", "eventTime": "2018-07-31T14:57:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "devs-team", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5c253f6-5787-4b59-8a50-ec408bd29347", "record_id": "flaws_cloudtrail:0000416:c5c253f6-5787-4b59-8a50-ec408bd29347", "row_index": 416, "timestamp": "2018-07-31T14:57:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5c253f6-5787-4b59-8a50-ec408bd29347", "eventTime": "2018-07-31T14:57:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "devs3bucket", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e3e3533-275b-4df7-a138-285026eb10ae1", "record_id": "flaws_cloudtrail:0000417:7e3e3533-275b-4df7-a138-285026eb10ae1", "row_index": 417, "timestamp": "2018-07-31T14:57:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e3e3533-275b-4df7-a138-285026eb10ae1", "eventTime": "2018-07-31T14:57:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "digital-innovation-lab-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b76c8937-aa18-411a-85ec-2e96067defec", "record_id": "flaws_cloudtrail:0000418:b76c8937-aa18-411a-85ec-2e96067defec", "row_index": 418, "timestamp": "2018-07-31T14:57:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 786, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b76c8937-aa18-411a-85ec-2e96067defec", "eventTime": "2018-07-31T14:57:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "digital-innovation-lab-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d3f5d15-94b0-402f-b94d-b505c4565a7a", "record_id": "flaws_cloudtrail:0000419:1d3f5d15-94b0-402f-b94d-b505c4565a7a", "row_index": 419, "timestamp": "2018-07-31T14:57:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d3f5d15-94b0-402f-b94d-b505c4565a7a", "eventTime": "2018-07-31T14:57:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "digital-marketing-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2a0d2a1-f0d7-456d-9fc0-35e14cf9d401", "record_id": "flaws_cloudtrail:0000420:d2a0d2a1-f0d7-456d-9fc0-35e14cf9d401", "row_index": 420, "timestamp": "2018-07-31T14:57:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2a0d2a1-f0d7-456d-9fc0-35e14cf9d401", "eventTime": "2018-07-31T14:57:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "digital-marketing-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70683-a668-4093-88e8-9cb41cece145", "record_id": "flaws_cloudtrail:0000421:70683-a668-4093-88e8-9cb41cece145", "row_index": 421, "timestamp": "2018-07-31T14:57:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70683-a668-4093-88e8-9cb41cece145", "eventTime": "2018-07-31T14:57:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "digital-phonemics", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ff9c0ec-1750-466c-99ae-ce1604137bd2", "record_id": "flaws_cloudtrail:0000422:9ff9c0ec-1750-466c-99ae-ce1604137bd2", "row_index": 422, "timestamp": "2018-07-31T14:57:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ff9c0ec-1750-466c-99ae-ce1604137bd2", "eventTime": "2018-07-31T14:57:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dji-fielddrive", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31ecfb85-2d7e-4e84-a84f-d38e0a96e3a8", "record_id": "flaws_cloudtrail:0000423:31ecfb85-2d7e-4e84-a84f-d38e0a96e3a8", "row_index": 423, "timestamp": "2018-07-31T14:57:17Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 521, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31ecfb85-2d7e-4e84-a84f-d38e0a96e3a8", "eventTime": "2018-07-31T14:57:17Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0a1e789-ac4f-4a99-930e-ed59362a6dbe", "record_id": "flaws_cloudtrail:0000424:b0a1e789-ac4f-4a99-930e-ed59362a6dbe", "row_index": 424, "timestamp": "2018-07-31T14:57:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0a1e789-ac4f-4a99-930e-ed59362a6dbe", "eventTime": "2018-07-31T14:57:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dms-275d9d40e824-cdiin8p4pibg", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cf60f31-78f0-43f8-8a8d-b057ffa2f52b", "record_id": "flaws_cloudtrail:0000425:2cf60f31-78f0-43f8-8a8d-b057ffa2f52b", "row_index": 425, "timestamp": "2018-07-31T14:57:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cf60f31-78f0-43f8-8a8d-b057ffa2f52b", "eventTime": "2018-07-31T14:57:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "doberman-utilities-cf-templates", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6f9d219a-d72e-4004-8f91-4e04575f493c", "record_id": "flaws_cloudtrail:0000426:6f9d219a-d72e-4004-8f91-4e04575f493c", "row_index": 426, "timestamp": "2018-07-31T14:57:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6f9d219a-d72e-4004-8f91-4e04575f493c", "eventTime": "2018-07-31T14:57:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "doberman-utilities-cloudtrail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f444118b-6790-4cdd-b70f-f67b388eefb5", "record_id": "flaws_cloudtrail:0000427:5f444118b-6790-4cdd-b70f-f67b388eefb5", "row_index": 427, "timestamp": "2018-07-31T14:57:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f444118b-6790-4cdd-b70f-f67b388eefb5", "eventTime": "2018-07-31T14:57:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "doberman-utilities-resources", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06f70d8-f720-42e9-bb00-e70e0b00a1f6", "record_id": "flaws_cloudtrail:0000428:d06f70d8-f720-42e9-bb00-e70e0b00a1f6", "row_index": 428, "timestamp": "2018-07-31T14:57:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06f70d8-f720-42e9-bb00-e70e0b00a1f6", "eventTime": "2018-07-31T14:57:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "docker-longterm-logs-7f0e35a6880b", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94f937a3-2964-480e-bcaf-f9ea4e4d00ef", "record_id": "flaws_cloudtrail:0000429:94f937a3-2964-480e-bcaf-f9ea4e4d00ef", "row_index": 429, "timestamp": "2018-07-31T14:57:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94f937a3-2964-480e-bcaf-f9ea4e4d00ef", "eventTime": "2018-07-31T14:57:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "docker-longterm-logs-f10daa186ce3", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad3e1a14-7345-4618-9a49-914dad3ced32", "record_id": "flaws_cloudtrail:0000430:ad3e1a14-7345-4618-9a49-914dad3ced32", "row_index": 430, "timestamp": "2018-07-31T14:57:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad3e1a14-7345-4618-9a49-914dad3ced32", "eventTime": "2018-07-31T14:57:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "document-repository", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc8a229a-c6cd-4d98-9fa1-a971698c84", "record_id": "flaws_cloudtrail:0000431:cc8a229a-c6cd-4d98-9fa1-a971698c84", "row_index": 431, "timestamp": "2018-07-31T14:57:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc8a229a-c6cd-4d98-9fa1-a971698c84", "eventTime": "2018-07-31T14:57:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dome-nine-enforcer-dev-serverlessdeploymentbucket-1av416gqdqd8u", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "877c135a-fb2e-492b-8f4c-8ed244b11d49", "record_id": "flaws_cloudtrail:0000432:877c135a-fb2e-492b-8f4c-8ed244b11d49", "row_index": 432, "timestamp": "2018-07-31T14:57:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "877c135a-fb2e-492b-8f4c-8ed244b11d49", "eventTime": "2018-07-31T14:57:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "drm-perm-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96d2f018-9daa-4496-9843-42d159535e9", "record_id": "flaws_cloudtrail:0000433:96d2f018-9daa-4496-9843-42d159535e9", "row_index": 433, "timestamp": "2018-07-31T14:57:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96d2f018-9daa-4496-9843-42d159535e9", "eventTime": "2018-07-31T14:57:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "drm-scratch-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49371be6-7aa3-44bc-b1ef-9409559b7759", "record_id": "flaws_cloudtrail:0000434:49371be6-7aa3-44bc-b1ef-9409559b7759", "row_index": 434, "timestamp": "2018-07-31T14:57:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 770, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49371be6-7aa3-44bc-b1ef-9409559b7759", "eventTime": "2018-07-31T14:57:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsa-dce-cf-template-artifacts", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c521d5cd-f522-40ce-8d51-b87ad1d109d6", "record_id": "flaws_cloudtrail:0000435:c521d5cd-f522-40ce-8d51-b87ad1d109d6", "row_index": 435, "timestamp": "2018-07-31T14:57:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c521d5cd-f522-40ce-8d51-b87ad1d109d6", "eventTime": "2018-07-31T14:57:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsa-gds-esp-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f2f1ec3-5902-4d09-b729-834221da19a", "record_id": "flaws_cloudtrail:0000436:2f2f1ec3-5902-4d09-b729-834221da19a", "row_index": 436, "timestamp": "2018-07-31T14:57:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f2f1ec3-5902-4d09-b729-834221da19a", "eventTime": "2018-07-31T14:57:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsa-gds-esp-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6b539797-d0be-4c1e-b3d0-e971035cd8ff7", "record_id": "flaws_cloudtrail:0000437:e6b539797-d0be-4c1e-b3d0-e971035cd8ff7", "row_index": 437, "timestamp": "2018-07-31T14:57:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6b539797-d0be-4c1e-b3d0-e971035cd8ff7", "eventTime": "2018-07-31T14:57:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsa-rce-cf-templates", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bef723f-518b-4e5a-a0fb-24b55112f383", "record_id": "flaws_cloudtrail:0000438:2bef723f-518b-4e5a-a0fb-24b55112f383", "row_index": 438, "timestamp": "2018-07-31T14:57:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bef723f-518b-4e5a-a0fb-24b55112f383", "eventTime": "2018-07-31T14:57:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsa-rce-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2d6d2a97-6b19-4a59-8f7e-960b9e7608d6", "record_id": "flaws_cloudtrail:0000439:2d6d2a97-6b19-4a59-8f7e-960b9e7608d6", "row_index": 439, "timestamp": "2018-07-31T14:57:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2d6d2a97-6b19-4a59-8f7e-960b9e7608d6", "eventTime": "2018-07-31T14:57:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsa-rce-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e8954d6-66c0-4810-94b1-b0b7066cea8b", "record_id": "flaws_cloudtrail:0000440:8e8954d6-66c0-4810-94b1-b0b7066cea8b", "row_index": 440, "timestamp": "2018-07-31T14:57:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e8954d6-66c0-4810-94b1-b0b7066cea8b", "eventTime": "2018-07-31T14:57:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsub-batch-jobs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ea53c3e-4e65-474c-b249-259340789852", "record_id": "flaws_cloudtrail:0000441:5ea53c3e-4e65-474c-b249-259340789852", "row_index": 441, "timestamp": "2018-07-31T14:57:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ea53c3e-4e65-474c-b249-259340789852", "eventTime": "2018-07-31T14:57:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsub-batch-jobs-dev-serverlessdeploymentbucket-99pi5umo71v3", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f00477-38dc-45d1-b038-5acabc463b63", "record_id": "flaws_cloudtrail:0000442:0f00477-38dc-45d1-b038-5acabc463b63", "row_index": 442, "timestamp": "2018-07-31T14:57:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 787, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f00477-38dc-45d1-b038-5acabc463b63", "eventTime": "2018-07-31T14:57:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsub-batch-jobs-genome-analytics-scratch-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c9cba2ad-3eff-43da-88e1-760a3aca7fc5", "record_id": "flaws_cloudtrail:0000443:c9cba2ad-3eff-43da-88e1-760a3aca7fc5", "row_index": 443, "timestamp": "2018-07-31T14:57:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c9cba2ad-3eff-43da-88e1-760a3aca7fc5", "eventTime": "2018-07-31T14:57:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsub-batch-jobs-manage-s-serverlessdeploymentbuck-jmjhx5t9fyir", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2a61f43-2e46-4526-a0a7-e8060bc524039", "record_id": "flaws_cloudtrail:0000444:e2a61f43-2e46-4526-a0a7-e8060bc524039", "row_index": 444, "timestamp": "2018-07-31T14:57:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2a61f43-2e46-4526-a0a7-e8060bc524039", "eventTime": "2018-07-31T14:57:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "dsub-batch-jobs-serverless", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6da688cd-9be6-4c9a-9d0b-1aabb12e296a", "record_id": "flaws_cloudtrail:0000445:6da688cd-9be6-4c9a-9d0b-1aabb12e296a", "row_index": 445, "timestamp": "2018-07-31T14:57:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6da688cd-9be6-4c9a-9d0b-1aabb12e296a", "eventTime": "2018-07-31T14:57:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ec-runs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "219ec99f-56ff-4b7f-b27f-e97c87d84424", "record_id": "flaws_cloudtrail:0000446:219ec99f-56ff-4b7f-b27f-e97c87d84424", "row_index": 446, "timestamp": "2018-07-31T14:57:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "219ec99f-56ff-4b7f-b27f-e97c87d84424", "eventTime": "2018-07-31T14:57:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "edge-misc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d9bb549-87f9-44d4-8e3b-77d56ae85c32", "record_id": "flaws_cloudtrail:0000447:7d9bb549-87f9-44d4-8e3b-77d56ae85c32", "row_index": 447, "timestamp": "2018-07-31T14:57:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d9bb549-87f9-44d4-8e3b-77d56ae85c32", "eventTime": "2018-07-31T14:57:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "edh-np-schemas-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "632764f5-4172-41fa-a518-c19e5550a67d", "record_id": "flaws_cloudtrail:0000448:632764f5-4172-41fa-a518-c19e5550a67d", "row_index": 448, "timestamp": "2018-07-31T14:57:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "632764f5-4172-41fa-a518-c19e5550a67d", "eventTime": "2018-07-31T14:57:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "edh-prd-schemas-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3763cee2-8a1c-4471-987e-1077abebb52d", "record_id": "flaws_cloudtrail:0000449:3763cee2-8a1c-4471-987e-1077abebb52d", "row_index": 449, "timestamp": "2018-07-31T14:57:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3763cee2-8a1c-4471-987e-1077abebb52d", "eventTime": "2018-07-31T14:57:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "eis-elb-logs-5124", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70942fb-41eb-42af-bd8a-2c89bb3b3ae6", "record_id": "flaws_cloudtrail:0000450:70942fb-41eb-42af-bd8a-2c89bb3b3ae6", "row_index": 450, "timestamp": "2018-07-31T14:57:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70942fb-41eb-42af-bd8a-2c89bb3b3ae6", "eventTime": "2018-07-31T14:57:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-144635690818", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed55449-42f6-4d43-ab66-4ef7ee03fb36", "record_id": "flaws_cloudtrail:0000451:ed55449-42f6-4d43-ab66-4ef7ee03fb36", "row_index": 451, "timestamp": "2018-07-31T14:57:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed55449-42f6-4d43-ab66-4ef7ee03fb36", "eventTime": "2018-07-31T14:57:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-794364812402", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3e39c34-9f8c-4937-9db0-270e70af0735", "record_id": "flaws_cloudtrail:0000452:b3e39c34-9f8c-4937-9db0-270e70af0735", "row_index": 452, "timestamp": "2018-07-31T14:57:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3e39c34-9f8c-4937-9db0-270e70af0735", "eventTime": "2018-07-31T14:57:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-780319824007", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5170b04d-b3a9-4e89-9da5-eafb53d470fe", "record_id": "flaws_cloudtrail:0000453:5170b04d-b3a9-4e89-9da5-eafb53d470fe", "row_index": 453, "timestamp": "2018-07-31T14:57:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5170b04d-b3a9-4e89-9da5-eafb53d470fe", "eventTime": "2018-07-31T14:57:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-762231108481", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1dd89e6-a040-46b2-a849-6f7db1e675665", "record_id": "flaws_cloudtrail:0000454:e1dd89e6-a040-46b2-a849-6f7db1e675665", "row_index": 454, "timestamp": "2018-07-31T14:57:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1dd89e6-a040-46b2-a849-6f7db1e675665", "eventTime": "2018-07-31T14:57:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c5d7bff-7c57-4c07-9133-f416b651a27a", "record_id": "flaws_cloudtrail:0000455:9c5d7bff-7c57-4c07-9133-f416b651a27a", "row_index": 455, "timestamp": "2018-07-31T14:57:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c5d7bff-7c57-4c07-9133-f416b651a27a", "eventTime": "2018-07-31T14:57:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-592456306282", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eb8d913-883a-4217-8946-06ef7cdb007a", "record_id": "flaws_cloudtrail:0000456:3eb8d913-883a-4217-8946-06ef7cdb007a", "row_index": 456, "timestamp": "2018-07-31T14:58:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eb8d913-883a-4217-8946-06ef7cdb007a", "eventTime": "2018-07-31T14:58:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-158608392521", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4a26e35-b9f2-4218-91da-b220cf46fae5", "record_id": "flaws_cloudtrail:0000457:c4a26e35-b9f2-4218-91da-b220cf46fae5", "row_index": 457, "timestamp": "2018-07-31T14:58:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4a26e35-b9f2-4218-91da-b220cf46fae5", "eventTime": "2018-07-31T14:58:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-938287929694", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1ba3fd5-5d6b-4faf-b9ee-5c9e1c4ba69d", "record_id": "flaws_cloudtrail:0000458:e1ba3fd5-5d6b-4faf-b9ee-5c9e1c4ba69d", "row_index": 458, "timestamp": "2018-07-31T14:58:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1ba3fd5-5d6b-4faf-b9ee-5c9e1c4ba69d", "eventTime": "2018-07-31T14:58:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-715966036932", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c54e3f5-7702-4a1e-aaa9-2c9b6922a3b5", "record_id": "flaws_cloudtrail:0000459:9c54e3f5-7702-4a1e-aaa9-2c9b6922a3b5", "row_index": 459, "timestamp": "2018-07-31T14:58:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c54e3f5-7702-4a1e-aaa9-2c9b6922a3b5", "eventTime": "2018-07-31T14:58:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-614438006914", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e602683-3645-4191-8e1a-13af7a86dc1b", "record_id": "flaws_cloudtrail:0000460:e602683-3645-4191-8e1a-13af7a86dc1b", "row_index": 460, "timestamp": "2018-07-31T14:58:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e602683-3645-4191-8e1a-13af7a86dc1b", "eventTime": "2018-07-31T14:58:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-920193504629", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f3bb1fa-efcd-4d84-b0bf-21277bf0aebb", "record_id": "flaws_cloudtrail:0000461:3f3bb1fa-efcd-4d84-b0bf-21277bf0aebb", "row_index": 461, "timestamp": "2018-07-31T14:58:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f3bb1fa-efcd-4d84-b0bf-21277bf0aebb", "eventTime": "2018-07-31T14:58:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-962689744791", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aee0146a-419b-4a4f-b646-f53b43c4307a", "record_id": "flaws_cloudtrail:0000462:aee0146a-419b-4a4f-b646-f53b43c4307a", "row_index": 462, "timestamp": "2018-07-31T14:58:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aee0146a-419b-4a4f-b646-f53b43c4307a", "eventTime": "2018-07-31T14:58:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-540211969663", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09fa3c71-759e-4ea8-a6d8-cc72653dadad", "record_id": "flaws_cloudtrail:0000463:09fa3c71-759e-4ea8-a6d8-cc72653dadad", "row_index": 463, "timestamp": "2018-07-31T14:58:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09fa3c71-759e-4ea8-a6d8-cc72653dadad", "eventTime": "2018-07-31T14:58:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-1-885790713237", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0e676c2-9289-4bb5-8743-ff83b862d8c5", "record_id": "flaws_cloudtrail:0000464:b0e676c2-9289-4bb5-8743-ff83b862d8c5", "row_index": 464, "timestamp": "2018-07-31T14:58:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0e676c2-9289-4bb5-8743-ff83b862d8c5", "eventTime": "2018-07-31T14:58:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-east-2-144635690818", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00fa2c67-7bfd-4e4b-ba58-db5c04e497d3", "record_id": "flaws_cloudtrail:0000465:00fa2c67-7bfd-4e4b-ba58-db5c04e497d3", "row_index": 465, "timestamp": "2018-07-31T14:58:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00fa2c67-7bfd-4e4b-ba58-db5c04e497d3", "eventTime": "2018-07-31T14:58:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-west-1-120789991464", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b9b0435-3f99-4d6e-9733-3fb6721e88f5", "record_id": "flaws_cloudtrail:0000466:2b9b0435-3f99-4d6e-9733-3fb6721e88f5", "row_index": 466, "timestamp": "2018-07-31T14:58:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b9b0435-3f99-4d6e-9733-3fb6721e88f5", "eventTime": "2018-07-31T14:58:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-west-2-144635690818", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f088093f-a14b-431b-b066-5ea33ba8a63b", "record_id": "flaws_cloudtrail:0000467:f088093f-a14b-431b-b066-5ea33ba8a63b", "row_index": 467, "timestamp": "2018-07-31T14:58:19Z", "event_type": "ListFunctions", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 527, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f088093f-a14b-431b-b066-5ea33ba8a63b", "eventTime": "2018-07-31T14:58:19Z", "eventName": "ListFunctions", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d45b016-e171-4f34-a263-1572c18a94bb", "record_id": "flaws_cloudtrail:0000468:0d45b016-e171-4f34-a263-1572c18a94bb", "row_index": 468, "timestamp": "2018-07-31T14:58:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d45b016-e171-4f34-a263-1572c18a94bb", "eventTime": "2018-07-31T14:58:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-west-2-762231108481", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbac4b74-0db0-499b-b116-0d1d891d6618", "record_id": "flaws_cloudtrail:0000469:fbac4b74-0db0-499b-b116-0d1d891d6618", "row_index": 469, "timestamp": "2018-07-31T14:58:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbac4b74-0db0-499b-b116-0d1d891d6618", "eventTime": "2018-07-31T14:58:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-west-2-158608392521", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6187a42-04f0-413a-8722-2770db60dd3a", "record_id": "flaws_cloudtrail:0000470:d6187a42-04f0-413a-8722-2770db60dd3a", "row_index": 470, "timestamp": "2018-07-31T14:58:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6187a42-04f0-413a-8722-2770db60dd3a", "eventTime": "2018-07-31T14:58:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elasticbeanstalk-us-west-2-646756289437", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c62d1f48-cda0-4393-aceb-8c52cb59acdf", "record_id": "flaws_cloudtrail:0000471:c62d1f48-cda0-4393-aceb-8c52cb59acdf", "row_index": 471, "timestamp": "2018-07-31T14:58:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c62d1f48-cda0-4393-aceb-8c52cb59acdf", "eventTime": "2018-07-31T14:58:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elb-doc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2b832842-4662-4456-86a7-6331eebafc52", "record_id": "flaws_cloudtrail:0000472:b2b832842-4662-4456-86a7-6331eebafc52", "row_index": 472, "timestamp": "2018-07-31T14:58:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2b832842-4662-4456-86a7-6331eebafc52", "eventTime": "2018-07-31T14:58:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "elb-inbound", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e081e09-c6ac-47d5-8688-760b648da0ea", "record_id": "flaws_cloudtrail:0000473:6e081e09-c6ac-47d5-8688-760b648da0ea", "row_index": 473, "timestamp": "2018-07-31T14:58:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e081e09-c6ac-47d5-8688-760b648da0ea", "eventTime": "2018-07-31T14:58:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "es-index-archive-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee9e5e9a-6199-4fbe-8f02-e27a1b7d2032", "record_id": "flaws_cloudtrail:0000474:ee9e5e9a-6199-4fbe-8f02-e27a1b7d2032", "row_index": 474, "timestamp": "2018-07-31T14:58:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee9e5e9a-6199-4fbe-8f02-e27a1b7d2032", "eventTime": "2018-07-31T14:58:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "es-monitoring-archive", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80d47e55-7045-4d1c-a75a-f87587046cd3", "record_id": "flaws_cloudtrail:0000475:80d47e55-7045-4d1c-a75a-f87587046cd3", "row_index": 475, "timestamp": "2018-07-31T14:58:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80d47e55-7045-4d1c-a75a-f87587046cd3", "eventTime": "2018-07-31T14:58:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "es-monitoring-backups", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba6c41f3-3af2-41d6-96d5-815594c34ea7b", "record_id": "flaws_cloudtrail:0000476:ba6c41f3-3af2-41d6-96d5-815594c34ea7b", "row_index": 476, "timestamp": "2018-07-31T14:58:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba6c41f3-3af2-41d6-96d5-815594c34ea7b", "eventTime": "2018-07-31T14:58:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "es-nonprod-backups", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "718e5e23-e6cc-4a7b-a328-cf4bb2a29494", "record_id": "flaws_cloudtrail:0000477:718e5e23-e6cc-4a7b-a328-cf4bb2a29494", "row_index": 477, "timestamp": "2018-07-31T14:58:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "718e5e23-e6cc-4a7b-a328-cf4bb2a29494", "eventTime": "2018-07-31T14:58:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "es-production-backups", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ad61cfb-a01e-43bc-bc75-376af54507", "record_id": "flaws_cloudtrail:0000478:2ad61cfb-a01e-43bc-bc75-376af54507", "row_index": 478, "timestamp": "2018-07-31T14:58:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ad61cfb-a01e-43bc-bc75-376af54507", "eventTime": "2018-07-31T14:58:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "esindextest", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9485f537-c040-4bda-903c-d5e240e75fc4", "record_id": "flaws_cloudtrail:0000479:9485f537-c040-4bda-903c-d5e240e75fc4", "row_index": 479, "timestamp": "2018-07-31T14:58:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9485f537-c040-4bda-903c-d5e240e75fc4", "eventTime": "2018-07-31T14:58:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "event-autoscoring", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "534a7426-a9f3-483d-8772-a7fafa13a9e6", "record_id": "flaws_cloudtrail:0000480:534a7426-a9f3-483d-8772-a7fafa13a9e6", "row_index": 480, "timestamp": "2018-07-31T14:58:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "534a7426-a9f3-483d-8772-a7fafa13a9e6", "eventTime": "2018-07-31T14:58:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "event-autoscoring-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "877b80b8-abc2-4873-8fe8-83dad32b842c", "record_id": "flaws_cloudtrail:0000481:877b80b8-abc2-4873-8fe8-83dad32b842c", "row_index": 481, "timestamp": "2018-07-31T14:58:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "877b80b8-abc2-4873-8fe8-83dad32b842c", "eventTime": "2018-07-31T14:58:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "event-autoscoring-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54491aa-2c14-4728-aab2-5a43b90c3dbb", "record_id": "flaws_cloudtrail:0000482:54491aa-2c14-4728-aab2-5a43b90c3dbb", "row_index": 482, "timestamp": "2018-07-31T14:58:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54491aa-2c14-4728-aab2-5a43b90c3dbb", "eventTime": "2018-07-31T14:58:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "event360-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e993b9f3-33f2-49ca-bcd3-7653d920d2ed", "record_id": "flaws_cloudtrail:0000483:e993b9f3-33f2-49ca-bcd3-7653d920d2ed", "row_index": 483, "timestamp": "2018-07-31T14:58:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e993b9f3-33f2-49ca-bcd3-7653d920d2ed", "eventTime": "2018-07-31T14:58:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "event360-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34d21885-be77-423e-89d8-546444ccbcfb", "record_id": "flaws_cloudtrail:0000484:34d21885-be77-423e-89d8-546444ccbcfb", "row_index": 484, "timestamp": "2018-07-31T14:58:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 763, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34d21885-be77-423e-89d8-546444ccbcfb", "eventTime": "2018-07-31T14:58:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "evwno-s3-testbucket-01", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cbabc79-4c8f-4dc3-9fae-0e13f61ff885", "record_id": "flaws_cloudtrail:0000485:7cbabc79-4c8f-4dc3-9fae-0e13f61ff885", "row_index": 485, "timestamp": "2018-07-31T14:58:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cbabc79-4c8f-4dc3-9fae-0e13f61ff885", "eventTime": "2018-07-31T14:58:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "facet-team-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535048b69-7965-4333-b21c-b02c60cb8d00", "record_id": "flaws_cloudtrail:0000486:535048b69-7965-4333-b21c-b02c60cb8d00", "row_index": 486, "timestamp": "2018-07-31T14:58:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535048b69-7965-4333-b21c-b02c60cb8d00", "eventTime": "2018-07-31T14:58:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "facet-team-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "baf3dd66-77e9-4ba8-9733-84ce6ca80ecb", "record_id": "flaws_cloudtrail:0000487:baf3dd66-77e9-4ba8-9733-84ce6ca80ecb", "row_index": 487, "timestamp": "2018-07-31T14:58:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "baf3dd66-77e9-4ba8-9733-84ce6ca80ecb", "eventTime": "2018-07-31T14:58:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmersfirst", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba35e23f-b28c-42cf-ae42-ff75a41c1e0f", "record_id": "flaws_cloudtrail:0000488:ba35e23f-b28c-42cf-ae42-ff75a41c1e0f", "row_index": 488, "timestamp": "2018-07-31T14:58:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba35e23f-b28c-42cf-ae42-ff75a41c1e0f", "eventTime": "2018-07-31T14:58:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmersfirst-content", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4f8f875-056d-4bc3-b3f2-d31f4b021795", "record_id": "flaws_cloudtrail:0000489:c4f8f875-056d-4bc3-b3f2-d31f4b021795", "row_index": 489, "timestamp": "2018-07-31T14:58:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4f8f875-056d-4bc3-b3f2-d31f4b021795", "eventTime": "2018-07-31T14:58:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmersfirstbackup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfeac39a-fe41-4cc2-b936-7d9f15ee9c19", "record_id": "flaws_cloudtrail:0000490:dfeac39a-fe41-4cc2-b936-7d9f15ee9c19", "row_index": 490, "timestamp": "2018-07-31T14:58:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfeac39a-fe41-4cc2-b936-7d9f15ee9c19", "eventTime": "2018-07-31T14:58:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmersfirstconfigs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d37e2efe-a53c-4e58-93e6-850079a0b717f", "record_id": "flaws_cloudtrail:0000491:d37e2efe-a53c-4e58-93e6-850079a0b717f", "row_index": 491, "timestamp": "2018-07-31T14:58:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d37e2efe-a53c-4e58-93e6-850079a0b717f", "eventTime": "2018-07-31T14:58:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmersfirstlogs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d63b1a1b-de36-47e5-874c-ed46ba6cbfcb", "record_id": "flaws_cloudtrail:0000492:d63b1a1b-de36-47e5-874c-ed46ba6cbfcb", "row_index": 492, "timestamp": "2018-07-31T14:58:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d63b1a1b-de36-47e5-874c-ed46ba6cbfcb", "eventTime": "2018-07-31T14:58:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrise", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "968272d46-a290-4916-8a71-0a576c4c3442", "record_id": "flaws_cloudtrail:0000493:968272d46-a290-4916-8a71-0a576c4c3442", "row_index": 493, "timestamp": "2018-07-31T14:59:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "968272d46-a290-4916-8a71-0a576c4c3442", "eventTime": "2018-07-31T14:59:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrise-agronomy", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "622bdc3b-4426-4db4-bb62-48de3b37a30e", "record_id": "flaws_cloudtrail:0000494:622bdc3b-4426-4db4-bb62-48de3b37a30e", "row_index": 494, "timestamp": "2018-07-31T14:59:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "622bdc3b-4426-4db4-bb62-48de3b37a30e", "eventTime": "2018-07-31T14:59:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrise-agronomy-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1edf0eae-7078-43a4-8a0c-bd1909a7f2c9", "record_id": "flaws_cloudtrail:0000495:1edf0eae-7078-43a4-8a0c-bd1909a7f2c9", "row_index": 495, "timestamp": "2018-07-31T14:59:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1edf0eae-7078-43a4-8a0c-bd1909a7f2c9", "eventTime": "2018-07-31T14:59:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrise-agronomy-stage", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d601eeab-2f9e-4002-91cb-b2bc14cb52d6", "record_id": "flaws_cloudtrail:0000496:d601eeab-2f9e-4002-91cb-b2bc14cb52d6", "row_index": 496, "timestamp": "2018-07-31T14:59:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d601eeab-2f9e-4002-91cb-b2bc14cb52d6", "eventTime": "2018-07-31T14:59:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrise-agronomy-stage1", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1951f88-9fc1-4de9-afa0-93831af4c2", "record_id": "flaws_cloudtrail:0000497:f1951f88-9fc1-4de9-afa0-93831af4c2", "row_index": 497, "timestamp": "2018-07-31T14:59:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1951f88-9fc1-4de9-afa0-93831af4c2", "eventTime": "2018-07-31T14:59:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrise-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5979c37f-a7e2-4ab7-8167-ced8c3dcc5e1", "record_id": "flaws_cloudtrail:0000498:5979c37f-a7e2-4ab7-8167-ced8c3dcc5e1", "row_index": 498, "timestamp": "2018-07-31T14:59:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5979c37f-a7e2-4ab7-8167-ced8c3dcc5e1", "eventTime": "2018-07-31T14:59:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrise-prod-elb-ogs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d6f3b497-e15c-4f81-b3ea-3fc5983ccfb0", "record_id": "flaws_cloudtrail:0000499:d6f3b497-e15c-4f81-b3ea-3fc5983ccfb0", "row_index": 499, "timestamp": "2018-07-31T14:59:13Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d6f3b497-e15c-4f81-b3ea-3fc5983ccfb0", "eventTime": "2018-07-31T14:59:13Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrise-prod-properties", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316ac544-f5d6-483a-a43d-d5c40fa3b9e8", "record_id": "flaws_cloudtrail:0000500:316ac544-f5d6-483a-a43d-d5c40fa3b9e8", "row_index": 500, "timestamp": "2018-07-31T14:59:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316ac544-f5d6-483a-a43d-d5c40fa3b9e8", "eventTime": "2018-07-31T14:59:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmriseapk-test", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4696f293-e0c7-4b3c-99ec-1821f8484df8", "record_id": "flaws_cloudtrail:0000501:4696f293-e0c7-4b3c-99ec-1821f8484df8", "row_index": 501, "timestamp": "2018-07-31T14:59:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4696f293-e0c7-4b3c-99ec-1821f8484df8", "eventTime": "2018-07-31T14:59:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrisebuilds", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e854218f-b1df-4845-86a8-aa6da305431c2", "record_id": "flaws_cloudtrail:0000502:e854218f-b1df-4845-86a8-aa6da305431c2", "row_index": 502, "timestamp": "2018-07-31T14:59:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e854218f-b1df-4845-86a8-aa6da305431c2", "eventTime": "2018-07-31T14:59:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmriseefk", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf40ed6b-f0aa-4897-81be-77f806b1349b", "record_id": "flaws_cloudtrail:0000503:bf40ed6b-f0aa-4897-81be-77f806b1349b", "row_index": 503, "timestamp": "2018-07-31T14:59:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf40ed6b-f0aa-4897-81be-77f806b1349b", "eventTime": "2018-07-31T14:59:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmriselogs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d06b0482-4d0e-4ae1-8a3f-4ae1b7e961c1", "record_id": "flaws_cloudtrail:0000504:d06b0482-4d0e-4ae1-8a3f-4ae1b7e961c1", "row_index": 504, "timestamp": "2018-07-31T14:59:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d06b0482-4d0e-4ae1-8a3f-4ae1b7e961c1", "eventTime": "2018-07-31T14:59:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "farmrisemail", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83a33b62-18e5-47fc-a5dc-70c5efe7fcc4", "record_id": "flaws_cloudtrail:0000505:83a33b62-18e5-47fc-a5dc-70c5efe7fcc4", "row_index": 505, "timestamp": "2018-07-31T14:59:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83a33b62-18e5-47fc-a5dc-70c5efe7fcc4", "eventTime": "2018-07-31T14:59:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fasal", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b67075-7942-4522-8bf9-4c72a934305e0", "record_id": "flaws_cloudtrail:0000506:4b67075-7942-4522-8bf9-4c72a934305e0", "row_index": 506, "timestamp": "2018-07-31T14:59:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b67075-7942-4522-8bf9-4c72a934305e0", "eventTime": "2018-07-31T14:59:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fasal-s3-data", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3a7f80e-1089-42ac-a256-596d4c38bd15", "record_id": "flaws_cloudtrail:0000507:b3a7f80e-1089-42ac-a256-596d4c38bd15", "row_index": 507, "timestamp": "2018-07-31T14:59:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3a7f80e-1089-42ac-a256-596d4c38bd15", "eventTime": "2018-07-31T14:59:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-amanda-backups", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "964f0bbb-f02f-4452-bf0c-7b1dc7479667", "record_id": "flaws_cloudtrail:0000508:964f0bbb-f02f-4452-bf0c-7b1dc7479667", "row_index": 508, "timestamp": "2018-07-31T14:59:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "964f0bbb-f02f-4452-bf0c-7b1dc7479667", "eventTime": "2018-07-31T14:59:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-archives", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d410e9f2-2049-44ab-9cf1-4ac78343a", "record_id": "flaws_cloudtrail:0000509:d410e9f2-2049-44ab-9cf1-4ac78343a", "row_index": 509, "timestamp": "2018-07-31T14:59:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d410e9f2-2049-44ab-9cf1-4ac78343a", "eventTime": "2018-07-31T14:59:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-build-artifacts", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f25db35-e9c2-465b-98a0-306988d", "record_id": "flaws_cloudtrail:0000510:9f25db35-e9c2-465b-98a0-306988d", "row_index": 510, "timestamp": "2018-07-31T14:59:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f25db35-e9c2-465b-98a0-306988d", "eventTime": "2018-07-31T14:59:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-build-images", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "137e9f8c-0e8b-4d02-9f14-00860c89", "record_id": "flaws_cloudtrail:0000511:137e9f8c-0e8b-4d02-9f14-00860c89", "row_index": 511, "timestamp": "2018-07-31T14:59:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "137e9f8c-0e8b-4d02-9f14-00860c89", "eventTime": "2018-07-31T14:59:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-cassandra-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "286bd592-5659-4a2a-83f0-6d6d02a947977", "record_id": "flaws_cloudtrail:0000512:286bd592-5659-4a2a-83f0-6d6d02a947977", "row_index": 512, "timestamp": "2018-07-31T14:59:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "286bd592-5659-4a2a-83f0-6d6d02a947977", "eventTime": "2018-07-31T14:59:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-cassandra-backup-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63474f29-b4a8-43fa-952c-237e6ccbc4df", "record_id": "flaws_cloudtrail:0000513:63474f29-b4a8-43fa-952c-237e6ccbc4df", "row_index": 513, "timestamp": "2018-07-31T14:59:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63474f29-b4a8-43fa-952c-237e6ccbc4df", "eventTime": "2018-07-31T14:59:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-command-ui", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c2a32831-eb25-4e64-8243-3d3eb479102", "record_id": "flaws_cloudtrail:0000514:c2a32831-eb25-4e64-8243-3d3eb479102", "row_index": 514, "timestamp": "2018-07-31T14:59:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c2a32831-eb25-4e64-8243-3d3eb479102", "eventTime": "2018-07-31T14:59:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-config-bucket", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "311a75b5-c18a-4005-a501-577f2b0118b2", "record_id": "flaws_cloudtrail:0000515:311a75b5-c18a-4005-a501-577f2b0118b2", "row_index": 515, "timestamp": "2018-07-31T14:59:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "311a75b5-c18a-4005-a501-577f2b0118b2", "eventTime": "2018-07-31T14:59:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-connect-backup", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f63d0e7-b37f-40ae-86b3-0f797fd3824d", "record_id": "flaws_cloudtrail:0000516:2f63d0e7-b37f-40ae-86b3-0f797fd3824d", "row_index": 516, "timestamp": "2018-07-31T14:59:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f63d0e7-b37f-40ae-86b3-0f797fd3824d", "eventTime": "2018-07-31T14:59:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-connect-ui", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3087d97-d3b5-431e-9037-bdc1ff713636c", "record_id": "flaws_cloudtrail:0000517:f3087d97-d3b5-431e-9037-bdc1ff713636c", "row_index": 517, "timestamp": "2018-07-31T14:59:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3087d97-d3b5-431e-9037-bdc1ff713636c", "eventTime": "2018-07-31T14:59:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-content-streaming", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b34e85b6-6899-463e-9331-51e90f7701f9", "record_id": "flaws_cloudtrail:0000518:b34e85b6-6899-463e-9331-51e90f7701f9", "row_index": 518, "timestamp": "2018-07-31T14:59:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b34e85b6-6899-463e-9331-51e90f7701f9", "eventTime": "2018-07-31T14:59:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-discourse-files", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a068266-9471-4632-9ae8-6d4d92c3440d", "record_id": "flaws_cloudtrail:0000519:a068266-9471-4632-9ae8-6d4d92c3440d", "row_index": 519, "timestamp": "2018-07-31T14:59:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a068266-9471-4632-9ae8-6d4d92c3440d", "eventTime": "2018-07-31T14:59:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-document-control", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5bc2979d-234d-4651-9865-3d7a9f2ed40e", "record_id": "flaws_cloudtrail:0000520:5bc2979d-234d-4651-9865-3d7a9f2ed40e", "row_index": 520, "timestamp": "2018-07-31T14:59:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5bc2979d-234d-4651-9865-3d7a9f2ed40e", "eventTime": "2018-07-31T14:59:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-elb-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1567ee74-1912-4267-8e37-d48751d451a", "record_id": "flaws_cloudtrail:0000521:1567ee74-1912-4267-8e37-d48751d451a", "row_index": 521, "timestamp": "2018-07-31T14:59:43Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1567ee74-1912-4267-8e37-d48751d451a", "eventTime": "2018-07-31T14:59:43Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-fielddrive-ui", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1407d8f-1199-40ba-ab2b-979662980adb", "record_id": "flaws_cloudtrail:0000522:f1407d8f-1199-40ba-ab2b-979662980adb", "row_index": 522, "timestamp": "2018-07-31T14:59:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1407d8f-1199-40ba-ab2b-979662980adb", "eventTime": "2018-07-31T14:59:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-firehose-testing", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1e763ad-75c8-410b-bf1f-f74d9d0409ac", "record_id": "flaws_cloudtrail:0000523:c1e763ad-75c8-410b-bf1f-f74d9d0409ac", "row_index": 523, "timestamp": "2018-07-31T14:59:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1e763ad-75c8-410b-bf1f-f74d9d0409ac", "eventTime": "2018-07-31T14:59:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-gitlab-backups", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d579644-9450-455d-bba9-860239a8c0641", "record_id": "flaws_cloudtrail:0000524:d579644-9450-455d-bba9-860239a8c0641", "row_index": 524, "timestamp": "2018-07-31T14:59:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d579644-9450-455d-bba9-860239a8c0641", "eventTime": "2018-07-31T14:59:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-imagine-ui", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a90304d-d775-4a11-a859-fc669acfa688", "record_id": "flaws_cloudtrail:0000525:7a90304d-d775-4a11-a859-fc669acfa688", "row_index": 525, "timestamp": "2018-07-31T14:59:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a90304d-d775-4a11-a859-fc669acfa688", "eventTime": "2018-07-31T14:59:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-m2m-errors", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "919243fa6-22c8-4101-b7a3-d1d86c38b96a", "record_id": "flaws_cloudtrail:0000526:919243fa6-22c8-4101-b7a3-d1d86c38b96a", "row_index": 526, "timestamp": "2018-07-31T14:59:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "919243fa6-22c8-4101-b7a3-d1d86c38b96a", "eventTime": "2018-07-31T14:59:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-pano", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82ae09e3-a975-4ca9-a7c1-720501c75a9d6", "record_id": "flaws_cloudtrail:0000527:82ae09e3-a975-4ca9-a7c1-720501c75a9d6", "row_index": 527, "timestamp": "2018-07-31T14:59:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82ae09e3-a975-4ca9-a7c1-720501c75a9d6", "eventTime": "2018-07-31T14:59:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-platform-team-share", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f85e764b-8c2a-4ba1-930c-ae0ed045b969", "record_id": "flaws_cloudtrail:0000528:f85e764b-8c2a-4ba1-930c-ae0ed045b969", "row_index": 528, "timestamp": "2018-07-31T14:59:52Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f85e764b-8c2a-4ba1-930c-ae0ed045b969", "eventTime": "2018-07-31T14:59:52Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-printing-ui", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54d5eee7-67c5-458b-8e89-38a626b7c4ae", "record_id": "flaws_cloudtrail:0000529:54d5eee7-67c5-458b-8e89-38a626b7c4ae", "row_index": 529, "timestamp": "2018-07-31T14:59:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54d5eee7-67c5-458b-8e89-38a626b7c4ae", "eventTime": "2018-07-31T14:59:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-pulse-ui", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f98a37c2-a738-49c3-85aa-a2bd66d347f1", "record_id": "flaws_cloudtrail:0000530:f98a37c2-a738-49c3-85aa-a2bd66d347f1", "row_index": 530, "timestamp": "2018-07-31T14:59:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f98a37c2-a738-49c3-85aa-a2bd66d347f1", "eventTime": "2018-07-31T14:59:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-rabbitmq", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7e6d9d33-2a58-4d77-8887-864393b4774b", "record_id": "flaws_cloudtrail:0000531:7e6d9d33-2a58-4d77-8887-864393b4774b", "row_index": 531, "timestamp": "2018-07-31T14:59:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7e6d9d33-2a58-4d77-8887-864393b4774b", "eventTime": "2018-07-31T14:59:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-spark-redshift", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c95757a-ac5a-4bc7-870e-84e18018e465", "record_id": "flaws_cloudtrail:0000532:c95757a-ac5a-4bc7-870e-84e18018e465", "row_index": 532, "timestamp": "2018-07-31T14:59:57Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c95757a-ac5a-4bc7-870e-84e18018e465", "eventTime": "2018-07-31T14:59:57Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-things-ui", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7aa0441b-3723-417e-a024-6ac6ebafbebe", "record_id": "flaws_cloudtrail:0000533:7aa0441b-3723-417e-a024-6ac6ebafbebe", "row_index": 533, "timestamp": "2018-07-31T14:59:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7aa0441b-3723-417e-a024-6ac6ebafbebe", "eventTime": "2018-07-31T14:59:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-ui-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6adc6421-b178-4b28-94e9-0d4ba364962b1", "record_id": "flaws_cloudtrail:0000534:6adc6421-b178-4b28-94e9-0d4ba364962b1", "row_index": 534, "timestamp": "2018-07-31T14:59:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6adc6421-b178-4b28-94e9-0d4ba364962b1", "eventTime": "2018-07-31T14:59:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fd-users-ui", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "03d9c9a4-bd70-4f15-962a-ec91ff9c3b6a", "record_id": "flaws_cloudtrail:0000535:03d9c9a4-bd70-4f15-962a-ec91ff9c3b6a", "row_index": 535, "timestamp": "2018-07-31T15:00:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "03d9c9a4-bd70-4f15-962a-ec91ff9c3b6a", "eventTime": "2018-07-31T15:00:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fdgatewayprod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a89460-cbd9-4fa9-839d-23e1f8c9297d", "record_id": "flaws_cloudtrail:0000536:7a89460-cbd9-4fa9-839d-23e1f8c9297d", "row_index": 536, "timestamp": "2018-07-31T15:00:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a89460-cbd9-4fa9-839d-23e1f8c9297d", "eventTime": "2018-07-31T15:00:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "feature-creeps-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "310d5007-c92f-4426-be3f-42ce5307be9b", "record_id": "flaws_cloudtrail:0000537:310d5007-c92f-4426-be3f-42ce5307be9b", "row_index": 537, "timestamp": "2018-07-31T15:00:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "310d5007-c92f-4426-be3f-42ce5307be9b", "eventTime": "2018-07-31T15:00:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-all-bucket-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3f4e01a-90e1-4aec-a37b-8b3f9ca6bdb2", "record_id": "flaws_cloudtrail:0000538:e3f4e01a-90e1-4aec-a37b-8b3f9ca6bdb2", "row_index": 538, "timestamp": "2018-07-31T15:00:05Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3f4e01a-90e1-4aec-a37b-8b3f9ca6bdb2", "eventTime": "2018-07-31T15:00:05Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-app-xl", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e806f27e-22a7-4011-8556-72f25ca8f032", "record_id": "flaws_cloudtrail:0000539:e806f27e-22a7-4011-8556-72f25ca8f032", "row_index": 539, "timestamp": "2018-07-31T15:00:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e806f27e-22a7-4011-8556-72f25ca8f032", "eventTime": "2018-07-31T15:00:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-dashboard-v5", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7b6c3f32-9767-42b1-9a7a-79f3f43dadfc", "record_id": "flaws_cloudtrail:0000540:7b6c3f32-9767-42b1-9a7a-79f3f43dadfc", "row_index": 540, "timestamp": "2018-07-31T15:00:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7b6c3f32-9767-42b1-9a7a-79f3f43dadfc", "eventTime": "2018-07-31T15:00:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-dashboard-v5.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4074ad42-c344-4c95-b3bb-9b45b6d86c7a", "record_id": "flaws_cloudtrail:0000541:4074ad42-c344-4c95-b3bb-9b45b6d86c7a", "row_index": 541, "timestamp": "2018-07-31T15:00:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4074ad42-c344-4c95-b3bb-9b45b6d86c7a", "eventTime": "2018-07-31T15:00:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-dashboard1-v5", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "032912c6-5c3d-4441-8782-00222ea2ee0", "record_id": "flaws_cloudtrail:0000542:032912c6-5c3d-4441-8782-00222ea2ee0", "row_index": 542, "timestamp": "2018-07-31T15:00:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "032912c6-5c3d-4441-8782-00222ea2ee0", "eventTime": "2018-07-31T15:00:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-executive-dashboard", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "959426c5-ee2d-44df-aa81-2004b3db08de", "record_id": "flaws_cloudtrail:0000543:959426c5-ee2d-44df-aa81-2004b3db08de", "row_index": 543, "timestamp": "2018-07-31T15:00:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 754, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "959426c5-ee2d-44df-aa81-2004b3db08de", "eventTime": "2018-07-31T15:00:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-farmerdata", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c4b7afc-4f8f-4357-94c6-cad870d3ece6", "record_id": "flaws_cloudtrail:0000544:8c4b7afc-4f8f-4357-94c6-cad870d3ece6", "row_index": 544, "timestamp": "2018-07-31T15:00:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c4b7afc-4f8f-4357-94c6-cad870d3ece6", "eventTime": "2018-07-31T15:00:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-musigmadata", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2af8c564-53d8-463c-9c38-72d64739ef4", "record_id": "flaws_cloudtrail:0000545:2af8c564-53d8-463c-9c38-72d64739ef4", "row_index": 545, "timestamp": "2018-07-31T15:00:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2af8c564-53d8-463c-9c38-72d64739ef4", "eventTime": "2018-07-31T15:00:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-operations", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9330a7b5-1ea6-4f39-ab88-c35532b3d74f", "record_id": "flaws_cloudtrail:0000546:9330a7b5-1ea6-4f39-ab88-c35532b3d74f", "row_index": 546, "timestamp": "2018-07-31T15:00:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9330a7b5-1ea6-4f39-ab88-c35532b3d74f", "eventTime": "2018-07-31T15:00:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-philippines-secondlevel-dashboard", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f0a32a7-946a-4189-aac5-7712aea68636", "record_id": "flaws_cloudtrail:0000547:5f0a32a7-946a-4189-aac5-7712aea68636", "row_index": 547, "timestamp": "2018-07-31T15:00:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f0a32a7-946a-4189-aac5-7712aea68636", "eventTime": "2018-07-31T15:00:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-s3-bucket-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60910ba-ff9e-44fc-ad00-332d2edbcb32", "record_id": "flaws_cloudtrail:0000548:60910ba-ff9e-44fc-ad00-332d2edbcb32", "row_index": 548, "timestamp": "2018-07-31T15:00:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60910ba-ff9e-44fc-ad00-332d2edbcb32", "eventTime": "2018-07-31T15:00:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-shared", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2be62b9-ac8c-4ca6-9aee-2f3f3841cbbd", "record_id": "flaws_cloudtrail:0000549:f2be62b9-ac8c-4ca6-9aee-2f3f3841cbbd", "row_index": 549, "timestamp": "2018-07-31T15:00:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2be62b9-ac8c-4ca6-9aee-2f3f3841cbbd", "eventTime": "2018-07-31T15:00:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ff-whitehat", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59e0c5c2-af7a-4838-9f4f-4231174d2ce6", "record_id": "flaws_cloudtrail:0000550:59e0c5c2-af7a-4838-9f4f-4231174d2ce6", "row_index": 550, "timestamp": "2018-07-31T15:00:20Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 752, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59e0c5c2-af7a-4838-9f4f-4231174d2ce6", "eventTime": "2018-07-31T15:00:20Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ffauditlogs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7af2806-f1cd-4003-8a6d-197509e6e12e", "record_id": "flaws_cloudtrail:0000551:a7af2806-f1cd-4003-8a6d-197509e6e12e", "row_index": 551, "timestamp": "2018-07-31T15:00:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 753, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7af2806-f1cd-4003-8a6d-197509e6e12e", "eventTime": "2018-07-31T15:00:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "ffawsapilogs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd13f863-c152-40ff-b6e4-8a3379e3ceab", "record_id": "flaws_cloudtrail:0000552:dd13f863-c152-40ff-b6e4-8a3379e3ceab", "row_index": 552, "timestamp": "2018-07-31T15:00:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd13f863-c152-40ff-b6e4-8a3379e3ceab", "eventTime": "2018-07-31T15:00:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fielddrive-assets", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c33553b-cc5d-4f3c-a478-af82583", "record_id": "flaws_cloudtrail:0000553:7c33553b-cc5d-4f3c-a478-af82583", "row_index": 553, "timestamp": "2018-07-31T15:00:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 755, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c33553b-cc5d-4f3c-a478-af82583", "eventTime": "2018-07-31T15:00:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fielddrive-emr-jobs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57280-b856-4ec8-a364-c9de959f1677", "record_id": "flaws_cloudtrail:0000554:57280-b856-4ec8-a364-c9de959f1677", "row_index": 554, "timestamp": "2018-07-31T15:00:25Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57280-b856-4ec8-a364-c9de959f1677", "eventTime": "2018-07-31T15:00:25Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fielddrive-field-stream", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a947e7c2-0db4-41d7-84ab-3d68d6fc99c7", "record_id": "flaws_cloudtrail:0000555:a947e7c2-0db4-41d7-84ab-3d68d6fc99c7", "row_index": 555, "timestamp": "2018-07-31T15:00:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a947e7c2-0db4-41d7-84ab-3d68d6fc99c7", "eventTime": "2018-07-31T15:00:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fielddrive-imagine", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45db6258-1e00-4ca6-b18e-3fd26cba2a9f", "record_id": "flaws_cloudtrail:0000556:45db6258-1e00-4ca6-b18e-3fd26cba2a9f", "row_index": 556, "timestamp": "2018-07-31T15:00:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45db6258-1e00-4ca6-b18e-3fd26cba2a9f", "eventTime": "2018-07-31T15:00:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fielddrive-landing-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba50501e-5f2a-4dd2-af99-c61a67ab693a", "record_id": "flaws_cloudtrail:0000557:ba50501e-5f2a-4dd2-af99-c61a67ab693a", "row_index": 557, "timestamp": "2018-07-31T15:00:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba50501e-5f2a-4dd2-af99-c61a67ab693a", "eventTime": "2018-07-31T15:00:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fielddrive-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ced2aa74-760b-46fb-baa3-bcf475412aca", "record_id": "flaws_cloudtrail:0000558:ced2aa74-760b-46fb-baa3-bcf475412aca", "row_index": 558, "timestamp": "2018-07-31T15:00:29Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAZ4WYOW5SB6NC88G3", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "19.100.75.29", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 530, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ced2aa74-760b-46fb-baa3-bcf475412aca", "eventTime": "2018-07-31T15:00:29Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "19.100.75.29", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAZ4WYOW5SB6NC88G3", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d984fc61-de6a-4115-8f07-20de4b72724", "record_id": "flaws_cloudtrail:0000559:d984fc61-de6a-4115-8f07-20de4b72724", "row_index": 559, "timestamp": "2018-07-31T15:00:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 764, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d984fc61-de6a-4115-8f07-20de4b72724", "eventTime": "2018-07-31T15:00:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "finch.na.ds.monsanto.com", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "216a4985-bd09-4138-8001-0e88fbf711017", "record_id": "flaws_cloudtrail:0000560:216a4985-bd09-4138-8001-0e88fbf711017", "row_index": 560, "timestamp": "2018-07-31T15:00:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 758, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "216a4985-bd09-4138-8001-0e88fbf711017", "eventTime": "2018-07-31T15:00:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "firehose-aechipping", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e692f92b-9c38-43a4-9c6d-9df56d2a6b1e", "record_id": "flaws_cloudtrail:0000561:e692f92b-9c38-43a4-9c6d-9df56d2a6b1e", "row_index": 561, "timestamp": "2018-07-31T15:00:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e692f92b-9c38-43a4-9c6d-9df56d2a6b1e", "eventTime": "2018-07-31T15:00:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "firehose-aechippingtest", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "275d3eb2-2be6-4c6e-a830-d0777efe7272", "record_id": "flaws_cloudtrail:0000562:275d3eb2-2be6-4c6e-a830-d0777efe7272", "row_index": 562, "timestamp": "2018-07-31T15:00:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "275d3eb2-2be6-4c6e-a830-d0777efe7272", "eventTime": "2018-07-31T15:00:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "firehose-aechippingtest-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f226e217-90ef-4507-a4d3-095316a9cd", "record_id": "flaws_cloudtrail:0000563:f226e217-90ef-4507-a4d3-095316a9cd", "row_index": 563, "timestamp": "2018-07-31T15:00:36Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f226e217-90ef-4507-a4d3-095316a9cd", "eventTime": "2018-07-31T15:00:36Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "firehose-breeding-vmek", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fa6b499e-a2ab-4fd7-8925-8dd8f107d1a2", "record_id": "flaws_cloudtrail:0000564:fa6b499e-a2ab-4fd7-8925-8dd8f107d1a2", "row_index": 564, "timestamp": "2018-07-31T15:00:37Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fa6b499e-a2ab-4fd7-8925-8dd8f107d1a2", "eventTime": "2018-07-31T15:00:37Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "firehose-breeding-vmek-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98a38c70-bd55-400b-81ec-2878031e5671", "record_id": "flaws_cloudtrail:0000565:98a38c70-bd55-400b-81ec-2878031e5671", "row_index": 565, "timestamp": "2018-07-31T15:00:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98a38c70-bd55-400b-81ec-2878031e5671", "eventTime": "2018-07-31T15:00:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "firehose-mavrc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "159ada4e-2a03-4fb5-ba76-d93f3987a3bd", "record_id": "flaws_cloudtrail:0000566:159ada4e-2a03-4fb5-ba76-d93f3987a3bd", "row_index": 566, "timestamp": "2018-07-31T15:00:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "159ada4e-2a03-4fb5-ba76-d93f3987a3bd", "eventTime": "2018-07-31T15:00:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flint-ip-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9a0702c-3111-4a55-ba26-6bc3185bd1b6", "record_id": "flaws_cloudtrail:0000567:b9a0702c-3111-4a55-ba26-6bc3185bd1b6", "row_index": 567, "timestamp": "2018-07-31T15:00:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9a0702c-3111-4a55-ba26-6bc3185bd1b6", "eventTime": "2018-07-31T15:00:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flint-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb511a3-720a-4634-bc74-12ee5870d963", "record_id": "flaws_cloudtrail:0000568:ceb511a3-720a-4634-bc74-12ee5870d963", "row_index": 568, "timestamp": "2018-07-31T15:00:42Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 769, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb511a3-720a-4634-bc74-12ee5870d963", "eventTime": "2018-07-31T15:00:42Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flint-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0411d1de-d56b-438e-97d2-699319c3e2b", "record_id": "flaws_cloudtrail:0000569:0411d1de-d56b-438e-97d2-699319c3e2b", "row_index": 569, "timestamp": "2018-07-31T15:00:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0411d1de-d56b-438e-97d2-699319c3e2b", "eventTime": "2018-07-31T15:00:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flux-capacitors-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea51a0b5-db51-4777-9fce-6d0b16211377", "record_id": "flaws_cloudtrail:0000570:ea51a0b5-db51-4777-9fce-6d0b16211377", "row_index": 570, "timestamp": "2018-07-31T15:00:45Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea51a0b5-db51-4777-9fce-6d0b16211377", "eventTime": "2018-07-31T15:00:45Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flux-capacitors-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b79827e9-f232-4b28-8ecd-b5b621e768b6", "record_id": "flaws_cloudtrail:0000571:b79827e9-f232-4b28-8ecd-b5b621e768b6", "row_index": 571, "timestamp": "2018-07-31T15:00:46Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b79827e9-f232-4b28-8ecd-b5b621e768b6", "eventTime": "2018-07-31T15:00:46Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "fr-cron-scripts", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23e081839-0fa8-44c8-9a68-e797557d1b0b9", "record_id": "flaws_cloudtrail:0000572:23e081839-0fa8-44c8-9a68-e797557d1b0b9", "row_index": 572, "timestamp": "2018-07-31T15:00:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23e081839-0fa8-44c8-9a68-e797557d1b0b9", "eventTime": "2018-07-31T15:00:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "frelblogs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "705a20d2-e206-4c62-9c13-0c29684", "record_id": "flaws_cloudtrail:0000573:705a20d2-e206-4c62-9c13-0c29684", "row_index": 573, "timestamp": "2018-07-31T15:00:49Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "705a20d2-e206-4c62-9c13-0c29684", "eventTime": "2018-07-31T15:00:49Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "frmumbai", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "084832e-2886-487b-b545-ee978a0248ca", "record_id": "flaws_cloudtrail:0000574:084832e-2886-487b-b545-ee978a0248ca", "row_index": 574, "timestamp": "2018-07-31T15:00:51Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "084832e-2886-487b-b545-ee978a0248ca", "eventTime": "2018-07-31T15:00:51Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "frstage", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dc4d05b-8166-474e-88f8-af514732", "record_id": "flaws_cloudtrail:0000575:3dc4d05b-8166-474e-88f8-af514732", "row_index": 575, "timestamp": "2018-07-31T15:00:53Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dc4d05b-8166-474e-88f8-af514732", "eventTime": "2018-07-31T15:00:53Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gateway-automation-testing", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a208bb32-758c-40cf-9273-d838a9e53363", "record_id": "flaws_cloudtrail:0000576:a208bb32-758c-40cf-9273-d838a9e53363", "row_index": 576, "timestamp": "2018-07-31T15:00:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a208bb32-758c-40cf-9273-d838a9e53363", "eventTime": "2018-07-31T15:00:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gateway-resolve-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2cb3cf8d-1c79-4a94-b1b7-486f7af6e55a", "record_id": "flaws_cloudtrail:0000577:2cb3cf8d-1c79-4a94-b1b7-486f7af6e55a", "row_index": 577, "timestamp": "2018-07-31T15:00:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2cb3cf8d-1c79-4a94-b1b7-486f7af6e55a", "eventTime": "2018-07-31T15:00:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gateway-resolve-prd", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c5692b2d-049c-4bbd-94b7-49280dd74e72", "record_id": "flaws_cloudtrail:0000578:c5692b2d-049c-4bbd-94b7-49280dd74e72", "row_index": 578, "timestamp": "2018-07-31T15:00:58Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 759, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c5692b2d-049c-4bbd-94b7-49280dd74e72", "eventTime": "2018-07-31T15:00:58Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gce-s3-access-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e72a311c-5fbd-438b-b81a-9cf30d9b8079", "record_id": "flaws_cloudtrail:0000579:e72a311c-5fbd-438b-b81a-9cf30d9b8079", "row_index": 579, "timestamp": "2018-07-31T15:01:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e72a311c-5fbd-438b-b81a-9cf30d9b8079", "eventTime": "2018-07-31T15:01:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "NoSuchBucket", "errorMessage": "The specified bucket does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gds-analyics-mbt-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcf5a0d1-7432-4d74-9ddb-809eb3545088", "record_id": "flaws_cloudtrail:0000580:dcf5a0d1-7432-4d74-9ddb-809eb3545088", "row_index": 580, "timestamp": "2018-07-31T15:01:01Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcf5a0d1-7432-4d74-9ddb-809eb3545088", "eventTime": "2018-07-31T15:01:01Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gds-analytics-mbt-sandbox", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "575ec708-cfeb-4818-b4f9-a0d4cd8a5d3e", "record_id": "flaws_cloudtrail:0000581:575ec708-cfeb-4818-b4f9-a0d4cd8a5d3e", "row_index": 581, "timestamp": "2018-07-31T15:01:02Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "575ec708-cfeb-4818-b4f9-a0d4cd8a5d3e", "eventTime": "2018-07-31T15:01:02Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gds-autofinishing-us-east-1-841375355009", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2651b148-801a-46fb-ba11-0da108416c0", "record_id": "flaws_cloudtrail:0000582:2651b148-801a-46fb-ba11-0da108416c0", "row_index": 582, "timestamp": "2018-07-31T15:01:03Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 780, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2651b148-801a-46fb-ba11-0da108416c0", "eventTime": "2018-07-31T15:01:03Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gds-autofinishing-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "550197a3-7123-4936-8b4a-5efa82b890b9", "record_id": "flaws_cloudtrail:0000583:550197a3-7123-4936-8b4a-5efa82b890b9", "row_index": 583, "timestamp": "2018-07-31T15:01:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "550197a3-7123-4936-8b4a-5efa82b890b9", "eventTime": "2018-07-31T15:01:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gds-poc-backups", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "154fe17a-9805-40ba-8e00-a63f44c3eb69", "record_id": "flaws_cloudtrail:0000584:154fe17a-9805-40ba-8e00-a63f44c3eb69", "row_index": 584, "timestamp": "2018-07-31T15:01:07Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 756, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "154fe17a-9805-40ba-8e00-a63f44c3eb69", "eventTime": "2018-07-31T15:01:07Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gds-reports-web", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c39c4fa-4f57-4cb5-9205-e16c5fa005233", "record_id": "flaws_cloudtrail:0000585:7c39c4fa-4f57-4cb5-9205-e16c5fa005233", "row_index": 585, "timestamp": "2018-07-31T15:01:08Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c39c4fa-4f57-4cb5-9205-e16c5fa005233", "eventTime": "2018-07-31T15:01:08Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "gds-vpa-us-east-1-352287204424", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed22c182-62bc-4287-b108-518c339d12cf", "record_id": "flaws_cloudtrail:0000586:ed22c182-62bc-4287-b108-518c339d12cf", "row_index": 586, "timestamp": "2018-07-31T15:01:10Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 765, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed22c182-62bc-4287-b108-518c339d12cf", "eventTime": "2018-07-31T15:01:10Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-archive", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fccb519d-1aac-4406-91f2-86110f96f", "record_id": "flaws_cloudtrail:0000587:fccb519d-1aac-4406-91f2-86110f96f", "row_index": 587, "timestamp": "2018-07-31T15:01:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fccb519d-1aac-4406-91f2-86110f96f", "eventTime": "2018-07-31T15:01:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-batch-j-serverlessdeploymentbuck-171eomzpcy8uy", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3cd6abe6-24aa-47f7-9c7a-51c0c85dcdae", "record_id": "flaws_cloudtrail:0000588:3cd6abe6-24aa-47f7-9c7a-51c0c85dcdae", "row_index": 588, "timestamp": "2018-07-31T15:01:12Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3cd6abe6-24aa-47f7-9c7a-51c0c85dcdae", "eventTime": "2018-07-31T15:01:12Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-collaboration", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b7c6729-7faa-430d-a7eb-19eaf3f2b09d", "record_id": "flaws_cloudtrail:0000589:1b7c6729-7faa-430d-a7eb-19eaf3f2b09d", "row_index": 589, "timestamp": "2018-07-31T15:01:14Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b7c6729-7faa-430d-a7eb-19eaf3f2b09d", "eventTime": "2018-07-31T15:01:14Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-dev", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e374adbe-db2d-4a8b-ba3f-d9a892046be3", "record_id": "flaws_cloudtrail:0000590:e374adbe-db2d-4a8b-ba3f-d9a892046be3", "row_index": 590, "timestamp": "2018-07-31T15:01:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e374adbe-db2d-4a8b-ba3f-d9a892046be3", "eventTime": "2018-07-31T15:01:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab1f0879-865a-41b0-9273-cbf4383b5cc7", "record_id": "flaws_cloudtrail:0000591:ab1f0879-865a-41b0-9273-cbf4383b5cc7", "row_index": 591, "timestamp": "2018-07-31T15:01:17Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab1f0879-865a-41b0-9273-cbf4383b5cc7", "eventTime": "2018-07-31T15:01:17Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-mbt", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f20d74b6-c8a8-409c-88e4-0e118f0959f9", "record_id": "flaws_cloudtrail:0000592:f20d74b6-c8a8-409c-88e4-0e118f0959f9", "row_index": 592, "timestamp": "2018-07-31T15:01:18Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f20d74b6-c8a8-409c-88e4-0e118f0959f9", "eventTime": "2018-07-31T15:01:18Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-np", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0343ff72-97e9-4fae-b31d-7a58f47a12e9", "record_id": "flaws_cloudtrail:0000593:0343ff72-97e9-4fae-b31d-7a58f47a12e9", "row_index": 593, "timestamp": "2018-07-31T15:01:19Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0343ff72-97e9-4fae-b31d-7a58f47a12e9", "eventTime": "2018-07-31T15:01:19Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-pachyderm-poc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f80b0c5-f45e-4610-86a9-09a91621aa0", "record_id": "flaws_cloudtrail:0000594:8f80b0c5-f45e-4610-86a9-09a91621aa0", "row_index": 594, "timestamp": "2018-07-31T15:01:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f80b0c5-f45e-4610-86a9-09a91621aa0", "eventTime": "2018-07-31T15:01:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-perm-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4843dce0-2943-4720-8d1b-88f3d15eea13", "record_id": "flaws_cloudtrail:0000595:4843dce0-2943-4720-8d1b-88f3d15eea13", "row_index": 595, "timestamp": "2018-07-31T15:01:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 766, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4843dce0-2943-4720-8d1b-88f3d15eea13", "eventTime": "2018-07-31T15:01:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-pipeline", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd266bfe-235e-4732-b929-ea9e054c74e7", "record_id": "flaws_cloudtrail:0000596:cd266bfe-235e-4732-b929-ea9e054c74e7", "row_index": 596, "timestamp": "2018-07-31T15:01:23Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 761, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd266bfe-235e-4732-b929-ea9e054c74e7", "eventTime": "2018-07-31T15:01:23Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-poc", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efd434ce-d922-4d6d-82fd-767f91cab6e3", "record_id": "flaws_cloudtrail:0000597:efd434ce-d922-4d6d-82fd-767f91cab6e3", "row_index": 597, "timestamp": "2018-07-31T15:01:24Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 762, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efd434ce-d922-4d6d-82fd-767f91cab6e3", "eventTime": "2018-07-31T15:01:24Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f899fc9-52e2-4023-88d9-20cee996761da", "record_id": "flaws_cloudtrail:0000598:8f899fc9-52e2-4023-88d9-20cee996761da", "row_index": 598, "timestamp": "2018-07-31T15:01:26Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 768, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f899fc9-52e2-4023-88d9-20cee996761da", "eventTime": "2018-07-31T15:01:26Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-reference", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e3bc674-b600-42b4-ae0e-d0059aaf70c9", "record_id": "flaws_cloudtrail:0000599:9e3bc674-b600-42b4-ae0e-d0059aaf70c9", "row_index": 599, "timestamp": "2018-07-31T15:01:27Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 774, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e3bc674-b600-42b4-ae0e-d0059aaf70c9", "eventTime": "2018-07-31T15:01:27Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-reference-public", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "999cc64b-2977-48ee-8442-1e5c562f94be", "record_id": "flaws_cloudtrail:0000600:999cc64b-2977-48ee-8442-1e5c562f94be", "row_index": 600, "timestamp": "2018-07-31T15:01:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 771, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "999cc64b-2977-48ee-8442-1e5c562f94be", "eventTime": "2018-07-31T15:01:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-scratch-space", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41c10c34-c81b-4f4b-b7fa-161e4871c156", "record_id": "flaws_cloudtrail:0000601:41c10c34-c81b-4f4b-b7fa-161e4871c156", "row_index": 601, "timestamp": "2018-07-31T15:01:30Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41c10c34-c81b-4f4b-b7fa-161e4871c156", "eventTime": "2018-07-31T15:01:30Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-sequencing-data", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a7239ea-2907-44ed-ade0-1393b2a5bcd1", "record_id": "flaws_cloudtrail:0000602:0a7239ea-2907-44ed-ade0-1393b2a5bcd1", "row_index": 602, "timestamp": "2018-07-31T15:01:31Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a7239ea-2907-44ed-ade0-1393b2a5bcd1", "eventTime": "2018-07-31T15:01:31Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-sequencing-external", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ed844b0-1d40-4c29-8d6a-8289a2ce6131", "record_id": "flaws_cloudtrail:0000603:3ed844b0-1d40-4c29-8d6a-8289a2ce6131", "row_index": 603, "timestamp": "2018-07-31T15:01:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ed844b0-1d40-4c29-8d6a-8289a2ce6131", "eventTime": "2018-07-31T15:01:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genome-analytics-sequencing-legacy", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ffb0893-fae5-42cf-9213-5eaecab5a2c4", "record_id": "flaws_cloudtrail:0000604:8ffb0893-fae5-42cf-9213-5eaecab5a2c4", "row_index": 604, "timestamp": "2018-07-31T15:01:34Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 785, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ffb0893-fae5-42cf-9213-5eaecab5a2c4", "eventTime": "2018-07-31T15:01:34Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genomics-cloud-engine-95e0389c03cf-us-west-2", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75bc959b-67c3-4332-a704-56aa7de0cf21", "record_id": "flaws_cloudtrail:0000605:75bc959b-67c3-4332-a704-56aa7de0cf21", "row_index": 605, "timestamp": "2018-07-31T15:01:38Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 788, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75bc959b-67c3-4332-a704-56aa7de0cf21", "eventTime": "2018-07-31T15:01:38Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genomics-cloud-engine-95e0389c03cf-us-west-2-106", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4165e9d-fdec-46b9-afe8-412dec812cb3", "record_id": "flaws_cloudtrail:0000606:f4165e9d-fdec-46b9-afe8-412dec812cb3", "row_index": 606, "timestamp": "2018-07-31T15:01:41Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4165e9d-fdec-46b9-afe8-412dec812cb3", "eventTime": "2018-07-31T15:01:41Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genomics-cloud-engine-95e0389c03cf-us-west-2-106-b", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "576a1bea-d44d-4678-8c0a-b1b9f0f8d770", "record_id": "flaws_cloudtrail:0000607:576a1bea-d44d-4678-8c0a-b1b9f0f8d770", "row_index": 607, "timestamp": "2018-07-31T15:01:44Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 794, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "576a1bea-d44d-4678-8c0a-b1b9f0f8d770", "eventTime": "2018-07-31T15:01:44Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genomics-cloud-engine-95e0389c03cf-us-west-2-106-prod", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef4df7ff-b6cf-4639-8321-1cb603d8ea48", "record_id": "flaws_cloudtrail:0000608:ef4df7ff-b6cf-4639-8321-1cb603d8ea48", "row_index": 608, "timestamp": "2018-07-31T15:01:47Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef4df7ff-b6cf-4639-8321-1cb603d8ea48", "eventTime": "2018-07-31T15:01:47Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genomics-cloud-engine-executions", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "efbf3e40-6292-4388-9020-49c8b7dc4789", "record_id": "flaws_cloudtrail:0000609:efbf3e40-6292-4388-9020-49c8b7dc4789", "row_index": 609, "timestamp": "2018-07-31T15:01:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 773, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "efbf3e40-6292-4388-9020-49c8b7dc4789", "eventTime": "2018-07-31T15:01:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genomics-cloud-engine-s3-logging", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "590d8fc7-48f0-414a-9f54-beeb065bbabf", "record_id": "flaws_cloudtrail:0000610:590d8fc7-48f0-414a-9f54-beeb065bbabf", "row_index": 610, "timestamp": "2018-07-31T15:01:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 772, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "590d8fc7-48f0-414a-9f54-beeb065bbabf", "eventTime": "2018-07-31T15:01:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genomics-cloud-engine-test-data", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d597794b4-9d6e-458c-ac01-c38b925412", "record_id": "flaws_cloudtrail:0000611:d597794b4-9d6e-458c-ac01-c38b925412", "row_index": 611, "timestamp": "2018-07-31T15:01:56Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "3.83.9.50", "user_agent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d597794b4-9d6e-458c-ac01-c38b925412", "eventTime": "2018-07-31T15:01:56Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "3.83.9.50", "userAgent": "[Boto3/1.7.66 Python/2.7.14+ Linux/4.13.0-kali1-amd64 Botocore/1.10.66 Resource]", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "Access Denied", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "genomics-xmen-us-east-1-841375355009", "acl": [""]}, "resources": []}}