Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM credential appears to have been reused from an unfamiliar client, with a brief identity check followed by broad account discovery and a privileged change. Identify the responsible principal, the MITRE ATT&CK technique that best fits the activity, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "316e41d7-d2e2-4059-adf0-46761fdd381c", "record_id": "flaws_cloudtrail:0000000:316e41d7-d2e2-4059-adf0-46761fdd381c", "row_index": 0, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 849, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "316e41d7-d2e2-4059-adf0-46761fdd381c", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42eaa62c-024a-4ebd-9c55-61663b148d", "record_id": "flaws_cloudtrail:0000001:42eaa62c-024a-4ebd-9c55-61663b148d", "row_index": 1, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42eaa62c-024a-4ebd-9c55-61663b148d", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38d4125e-e5e8-4546-aa2e-b9bac74b2e3d", "record_id": "flaws_cloudtrail:0000002:38d4125e-e5e8-4546-aa2e-b9bac74b2e3d", "row_index": 2, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 857, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38d4125e-e5e8-4546-aa2e-b9bac74b2e3d", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "181d7815-24bf-4bc5-84bd-0569338a0356", "record_id": "flaws_cloudtrail:0000003:181d7815-24bf-4bc5-84bd-0569338a0356", "row_index": 3, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 845, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "181d7815-24bf-4bc5-84bd-0569338a0356", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83f723195-e7fb-4561-9f9f-e6dd8ae52d97", "record_id": "flaws_cloudtrail:0000004:83f723195-e7fb-4561-9f9f-e6dd8ae52d97", "row_index": 4, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 862, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83f723195-e7fb-4561-9f9f-e6dd8ae52d97", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20d5d78d-80d1-4870-ada9-d731b6f70bc0", "record_id": "flaws_cloudtrail:0000005:20d5d78d-80d1-4870-ada9-d731b6f70bc0", "row_index": 5, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 860, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20d5d78d-80d1-4870-ada9-d731b6f70bc0", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af4d07da-ccc0-4ca5-ae4b-3c3829069ac5", "record_id": "flaws_cloudtrail:0000006:af4d07da-ccc0-4ca5-ae4b-3c3829069ac5", "row_index": 6, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 848, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af4d07da-ccc0-4ca5-ae4b-3c3829069ac5", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c1a3a02-bc8e-4cd8-9e1b-bd02468c16a3", "record_id": "flaws_cloudtrail:0000007:3c1a3a02-bc8e-4cd8-9e1b-bd02468c16a3", "row_index": 7, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 847, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c1a3a02-bc8e-4cd8-9e1b-bd02468c16a3", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d149f9e-45b7-49d5-b96e-aab9ee1e1a3f", "record_id": "flaws_cloudtrail:0000008:7d149f9e-45b7-49d5-b96e-aab9ee1e1a3f", "row_index": 8, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d149f9e-45b7-49d5-b96e-aab9ee1e1a3f", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77a0ba78-dc87-4674-a2bf-4f6f18521cd2", "record_id": "flaws_cloudtrail:0000009:77a0ba78-dc87-4674-a2bf-4f6f18521cd2", "row_index": 9, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 851, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77a0ba78-dc87-4674-a2bf-4f6f18521cd2", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47f2d8a2-f7b5-4632-ba4a-5139bbb52f0c", "record_id": "flaws_cloudtrail:0000010:47f2d8a2-f7b5-4632-ba4a-5139bbb52f0c", "row_index": 10, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47f2d8a2-f7b5-4632-ba4a-5139bbb52f0c", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "521d5c3d-566b-4924-81f0-0df693030", "record_id": "flaws_cloudtrail:0000011:521d5c3d-566b-4924-81f0-0df693030", "row_index": 11, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "521d5c3d-566b-4924-81f0-0df693030", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78a1f8d1-7eed-40fb-a8f4-178ea82ae920", "record_id": "flaws_cloudtrail:0000012:78a1f8d1-7eed-40fb-a8f4-178ea82ae920", "row_index": 12, "timestamp": "2018-06-21T21:50:37Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78a1f8d1-7eed-40fb-a8f4-178ea82ae920", "eventTime": "2018-06-21T21:50:37Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e79e949-1023-45bd-8229-a50ac06c08ef", "record_id": "flaws_cloudtrail:0000013:8e79e949-1023-45bd-8229-a50ac06c08ef", "row_index": 13, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 859, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e79e949-1023-45bd-8229-a50ac06c08ef", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4eb60bcb-ac71-4527-a390-c39df6a741c3", "record_id": "flaws_cloudtrail:0000014:4eb60bcb-ac71-4527-a390-c39df6a741c3", "row_index": 14, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4eb60bcb-ac71-4527-a390-c39df6a741c3", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "093137d58-da04-46ec-b3c0-45133eff1f7", "record_id": "flaws_cloudtrail:0000015:093137d58-da04-46ec-b3c0-45133eff1f7", "row_index": 15, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "093137d58-da04-46ec-b3c0-45133eff1f7", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e963d99a-9299-467e-a412-1bbc1deaa5db", "record_id": "flaws_cloudtrail:0000016:e963d99a-9299-467e-a412-1bbc1deaa5db", "row_index": 16, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e963d99a-9299-467e-a412-1bbc1deaa5db", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1abc8e8b-305b-4b1c-a167-fdcf87415bff", "record_id": "flaws_cloudtrail:0000017:1abc8e8b-305b-4b1c-a167-fdcf87415bff", "row_index": 17, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1abc8e8b-305b-4b1c-a167-fdcf87415bff", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbc24ec2-c894-4e18-bc11-8e700e18aa86", "record_id": "flaws_cloudtrail:0000018:fbc24ec2-c894-4e18-bc11-8e700e18aa86", "row_index": 18, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbc24ec2-c894-4e18-bc11-8e700e18aa86", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7ae876e-0282-4cf5-a3de-8b3ae5e61226", "record_id": "flaws_cloudtrail:0000019:f7ae876e-0282-4cf5-a3de-8b3ae5e61226", "row_index": 19, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7ae876e-0282-4cf5-a3de-8b3ae5e61226", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc829b6e-002e-49ff-81f5-d9141f537fc1", "record_id": "flaws_cloudtrail:0000020:bc829b6e-002e-49ff-81f5-d9141f537fc1", "row_index": 20, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 844, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc829b6e-002e-49ff-81f5-d9141f537fc1", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "267173-2bcc-4ac3-8109-05d2475e3132", "record_id": "flaws_cloudtrail:0000021:267173-2bcc-4ac3-8109-05d2475e3132", "row_index": 21, "timestamp": "2018-06-21T21:50:38Z", "event_type": "DescribeCacheClusters", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "267173-2bcc-4ac3-8109-05d2475e3132", "eventTime": "2018-06-21T21:50:38Z", "eventName": "DescribeCacheClusters", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheClusters", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbb55bcf-af2f-412b-8d19-d5896a0914ec", "record_id": "flaws_cloudtrail:0000022:dbb55bcf-af2f-412b-8d19-d5896a0914ec", "row_index": 22, "timestamp": "2018-06-21T21:50:39Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbb55bcf-af2f-412b-8d19-d5896a0914ec", "eventTime": "2018-06-21T21:50:39Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f58a5017-1ca7-477b-b533-036db1cbdbfa", "record_id": "flaws_cloudtrail:0000023:f58a5017-1ca7-477b-b533-036db1cbdbfa", "row_index": 23, "timestamp": "2018-06-21T21:50:39Z", "event_type": "DescribeCacheSecurityGroups", "event_source": "elasticache.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f58a5017-1ca7-477b-b533-036db1cbdbfa", "eventTime": "2018-06-21T21:50:39Z", "eventName": "DescribeCacheSecurityGroups", "eventSource": "elasticache.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: elasticache:DescribeCacheSecurityGroups", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b19e00d-d2b7-4927-976c-fbdda1023c22", "record_id": "flaws_cloudtrail:0000024:3b19e00d-d2b7-4927-976c-fbdda1023c22", "row_index": 24, "timestamp": "2018-06-21T21:50:40Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b19e00d-d2b7-4927-976c-fbdda1023c22", "eventTime": "2018-06-21T21:50:40Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: route53:ListHostedZones", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "127de853-38f1-446a-ba25-90f7cb4eff4a", "record_id": "flaws_cloudtrail:0000025:127de853-38f1-446a-ba25-90f7cb4eff4a", "row_index": 25, "timestamp": "2018-06-21T21:51:49Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 867, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "127de853-38f1-446a-ba25-90f7cb4eff4a", "eventTime": "2018-06-21T21:51:49Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1909a84e-1e4d-442e-93fa-204cfacc1b14", "record_id": "flaws_cloudtrail:0000026:1909a84e-1e4d-442e-93fa-204cfacc1b14", "row_index": 26, "timestamp": "2018-06-21T21:51:49Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1909a84e-1e4d-442e-93fa-204cfacc1b14", "eventTime": "2018-06-21T21:51:49Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b5996e3-deb1-48a0-8e1a-5c641d0d85cb", "record_id": "flaws_cloudtrail:0000027:4b5996e3-deb1-48a0-8e1a-5c641d0d85cb", "row_index": 27, "timestamp": "2018-06-21T21:51:49Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b5996e3-deb1-48a0-8e1a-5c641d0d85cb", "eventTime": "2018-06-21T21:51:49Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85d1e556-a9ed-4238-b057-11f7e18493", "record_id": "flaws_cloudtrail:0000028:85d1e556-a9ed-4238-b057-11f7e18493", "row_index": 28, "timestamp": "2018-06-21T21:51:49Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85d1e556-a9ed-4238-b057-11f7e18493", "eventTime": "2018-06-21T21:51:49Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2553cc6a-189f-479f-9245-5a8d31684bf5", "record_id": "flaws_cloudtrail:0000029:2553cc6a-189f-479f-9245-5a8d31684bf5", "row_index": 29, "timestamp": "2018-06-21T21:51:49Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2553cc6a-189f-479f-9245-5a8d31684bf5", "eventTime": "2018-06-21T21:51:49Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-south-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a25401-b74b-46f3-bba4-3dfec4820bfa", "record_id": "flaws_cloudtrail:0000030:a25401-b74b-46f3-bba4-3dfec4820bfa", "row_index": 30, "timestamp": "2018-06-21T21:51:49Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 864, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a25401-b74b-46f3-bba4-3dfec4820bfa", "eventTime": "2018-06-21T21:51:49Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e98c471e-1068-44b4-a5d7-eefd1e2ced49", "record_id": "flaws_cloudtrail:0000031:e98c471e-1068-44b4-a5d7-eefd1e2ced49", "row_index": 31, "timestamp": "2018-06-21T21:51:49Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e98c471e-1068-44b4-a5d7-eefd1e2ced49", "eventTime": "2018-06-21T21:51:49Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c8757c9-7472-4b58-9b9a-a715918284c0", "record_id": "flaws_cloudtrail:0000032:0c8757c9-7472-4b58-9b9a-a715918284c0", "row_index": 32, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c8757c9-7472-4b58-9b9a-a715918284c0", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-northeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56d55ae3-61a7-45e8-97d5-884a63bbe158", "record_id": "flaws_cloudtrail:0000033:56d55ae3-61a7-45e8-97d5-884a63bbe158", "row_index": 33, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56d55ae3-61a7-45e8-97d5-884a63bbe158", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06412-d1b8-4704-ae83-c9ee4eafc0f1", "record_id": "flaws_cloudtrail:0000034:c06412-d1b8-4704-ae83-c9ee4eafc0f1", "row_index": 34, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 878, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06412-d1b8-4704-ae83-c9ee4eafc0f1", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ap-southeast-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f470b077-4d32-477d-a4aa-b8258c23927f", "record_id": "flaws_cloudtrail:0000035:f470b077-4d32-477d-a4aa-b8258c23927f", "row_index": 35, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 863, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f470b077-4d32-477d-a4aa-b8258c23927f", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eadae0b-9a6c-4b7b-afee-02ceea440659", "record_id": "flaws_cloudtrail:0000036:6eadae0b-9a6c-4b7b-afee-02ceea440659", "row_index": 36, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eadae0b-9a6c-4b7b-afee-02ceea440659", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:ca-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea0b147e-4574-4fb5-86c1-8953d4d0a9b6", "record_id": "flaws_cloudtrail:0000037:ea0b147e-4574-4fb5-86c1-8953d4d0a9b6", "row_index": 37, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 861, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea0b147e-4574-4fb5-86c1-8953d4d0a9b6", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f30bcffb-e440-4fcd-9360-f3e34da940538", "record_id": "flaws_cloudtrail:0000038:f30bcffb-e440-4fcd-9360-f3e34da940538", "row_index": 38, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 858, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f30bcffb-e440-4fcd-9360-f3e34da940538", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ca4011f-c3c2-496a-a668-d19995a2", "record_id": "flaws_cloudtrail:0000039:8ca4011f-c3c2-496a-a668-d19995a2", "row_index": 39, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 866, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ca4011f-c3c2-496a-a668-d19995a2", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7581d1e-c26c-4ac3-88ca-604eeaf2b49f", "record_id": "flaws_cloudtrail:0000040:d7581d1e-c26c-4ac3-88ca-604eeaf2b49f", "row_index": 40, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7581d1e-c26c-4ac3-88ca-604eeaf2b49f", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a691c346-854b-4124-8231-a9c515d2c97a", "record_id": "flaws_cloudtrail:0000041:a691c346-854b-4124-8231-a9c515d2c97a", "row_index": 41, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 871, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a691c346-854b-4124-8231-a9c515d2c97a", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbd890027-37c2-428c-8aad-136c55c743a1", "record_id": "flaws_cloudtrail:0000042:fbd890027-37c2-428c-8aad-136c55c743a1", "row_index": 42, "timestamp": "2018-06-21T21:51:50Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbd890027-37c2-428c-8aad-136c55c743a1", "eventTime": "2018-06-21T21:51:50Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:eu-west-3:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68e59c14-ca3b-451b-874e-403cdf746962", "record_id": "flaws_cloudtrail:0000043:68e59c14-ca3b-451b-874e-403cdf746962", "row_index": 43, "timestamp": "2018-06-21T21:51:51Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 876, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68e59c14-ca3b-451b-874e-403cdf746962", "eventTime": "2018-06-21T21:51:51Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-central-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dfd11391-7f74-49ad-994b-2356214bf02e", "record_id": "flaws_cloudtrail:0000044:dfd11391-7f74-49ad-994b-2356214bf02e", "row_index": 44, "timestamp": "2018-06-21T21:51:51Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dfd11391-7f74-49ad-994b-2356214bf02e", "eventTime": "2018-06-21T21:51:51Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:eu-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "431baa9d-faad-4a4a-8af0-13a040ba6587", "record_id": "flaws_cloudtrail:0000045:431baa9d-faad-4a4a-8af0-13a040ba6587", "row_index": 45, "timestamp": "2018-06-21T21:51:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "431baa9d-faad-4a4a-8af0-13a040ba6587", "eventTime": "2018-06-21T21:51:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c05670-98fd-4ee7-9c1c-3d92e0f32036", "record_id": "flaws_cloudtrail:0000046:c05670-98fd-4ee7-9c1c-3d92e0f32036", "row_index": 46, "timestamp": "2018-06-21T21:51:52Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 868, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c05670-98fd-4ee7-9c1c-3d92e0f32036", "eventTime": "2018-06-21T21:51:52Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02526be3-3a3c-4c61-b66c-1e93e1a3ea29", "record_id": "flaws_cloudtrail:0000047:02526be3-3a3c-4c61-b66c-1e93e1a3ea29", "row_index": 47, "timestamp": "2018-06-21T21:51:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02526be3-3a3c-4c61-b66c-1e93e1a3ea29", "eventTime": "2018-06-21T21:51:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-east-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8390b4b9-4e68-4f00-a0a0-627036e798505", "record_id": "flaws_cloudtrail:0000048:8390b4b9-4e68-4f00-a0a0-627036e798505", "row_index": 48, "timestamp": "2018-06-21T21:51:52Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 872, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8390b4b9-4e68-4f00-a0a0-627036e798505", "eventTime": "2018-06-21T21:51:52Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9edef3f8-4df9-4485-b2fa-9ffe463f384b", "record_id": "flaws_cloudtrail:0000049:9edef3f8-4df9-4485-b2fa-9ffe463f384b", "row_index": 49, "timestamp": "2018-06-21T21:51:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 852, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9edef3f8-4df9-4485-b2fa-9ffe463f384b", "eventTime": "2018-06-21T21:51:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c78cdb2-4d47-4ee8-9a2a-e9bbfac1e195", "record_id": "flaws_cloudtrail:0000050:4c78cdb2-4d47-4ee8-9a2a-e9bbfac1e195", "row_index": 50, "timestamp": "2018-06-21T21:51:52Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c78cdb2-4d47-4ee8-9a2a-e9bbfac1e195", "eventTime": "2018-06-21T21:51:52Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb1cc212-e1bc-414e-b1b2-0dcc1dfaa8c3", "record_id": "flaws_cloudtrail:0000051:fb1cc212-e1bc-414e-b1b2-0dcc1dfaa8c3", "row_index": 51, "timestamp": "2018-06-21T21:51:52Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb1cc212-e1bc-414e-b1b2-0dcc1dfaa8c3", "eventTime": "2018-06-21T21:51:52Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:us-west-2:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72efc129-505b-4be0-8d26-b1a4a680055", "record_id": "flaws_cloudtrail:0000052:72efc129-505b-4be0-8d26-b1a4a680055", "row_index": 52, "timestamp": "2018-06-21T21:51:53Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 869, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72efc129-505b-4be0-8d26-b1a4a680055", "eventTime": "2018-06-21T21:51:53Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3aae1887-b775-4583-819c-06538f6ca567", "record_id": "flaws_cloudtrail:0000053:3aae1887-b775-4583-819c-06538f6ca567", "row_index": 53, "timestamp": "2018-06-21T21:51:53Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 856, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3aae1887-b775-4583-819c-06538f6ca567", "eventTime": "2018-06-21T21:51:53Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListTopics on resource: arn:aws:sns:sa-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec84d3a0-9f63-4184-8a85-b355d7e797ac", "record_id": "flaws_cloudtrail:0000054:ec84d3a0-9f63-4184-8a85-b355d7e797ac", "row_index": 54, "timestamp": "2018-06-21T21:51:53Z", "event_type": "ListSubscriptions", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 870, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec84d3a0-9f63-4184-8a85-b355d7e797ac", "eventTime": "2018-06-21T21:51:53Z", "eventName": "ListSubscriptions", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: SNS:ListSubscriptions on resource: arn:aws:sns:us-east-1:811596193553:*", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca568972-504c-413d-8a9e-8b114eaf65cc", "record_id": "flaws_cloudtrail:0000055:ca568972-504c-413d-8a9e-8b114eaf65cc", "row_index": 55, "timestamp": "2018-06-21T21:51:55Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca568972-504c-413d-8a9e-8b114eaf65cc", "eventTime": "2018-06-21T21:51:55Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "responseElements": {"userId": "AIDA9BO36HFBHKGJAO9C1", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "427137ab-02b7-48f6-8e9a-351d04b3c68c", "record_id": "flaws_cloudtrail:0000056:427137ab-02b7-48f6-8e9a-351d04b3c68c", "row_index": 56, "timestamp": "2018-06-21T22:06:48Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAA06U2DRE4AC23A8H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.152.97.53", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 544, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "427137ab-02b7-48f6-8e9a-351d04b3c68c", "eventTime": "2018-06-21T22:06:48Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.152.97.53", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAA06U2DRE4AC23A8H", "userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67de621d-aaaa-4df3-be8e-428d8507ee2c", "record_id": "flaws_cloudtrail:0000057:67de621d-aaaa-4df3-be8e-428d8507ee2c", "row_index": 57, "timestamp": "2018-06-21T22:07:41Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAA06U2DRE4AC23A8H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.152.97.53", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 573, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67de621d-aaaa-4df3-be8e-428d8507ee2c", "eventTime": "2018-06-21T22:07:41Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.152.97.53", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAA06U2DRE4AC23A8H", "userName": "backup"}, "requestParameters": {"maxItems": 100}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1f4bd79-7a6d-476d-81af-11412f370000", "record_id": "flaws_cloudtrail:0000058:b1f4bd79-7a6d-476d-81af-11412f370000", "row_index": 58, "timestamp": "2018-06-21T22:09:27Z", "event_type": "CreateLogStream", "event_source": "logs.amazonaws.com", "principal": {"type": "AssumedRole", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "account_id": "811596193553", "principal_id": "AROAI4E1FBACLY3FPC6BB:Level6", "user_name": null, "access_key_id": "ASIAAXIUSDPQGYAORY8A", "session_issuer_arn": "arn:aws:iam::811596193553:role/service-role/Level6", "session_issuer_user_name": "Level6"}, "network": {"source_ip": "252.146.32.6", "user_agent": "awslambda-worker", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 1029, "raw_record_depth": 4, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1f4bd79-7a6d-476d-81af-11412f370000", "eventTime": "2018-06-21T22:09:27Z", "eventName": "CreateLogStream", "eventSource": "logs.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "252.146.32.6", "userAgent": "awslambda-worker", "awsRegion": "us-west-2", "userIdentity": {"type": "AssumedRole", "principalId": "AROAI4E1FBACLY3FPC6BB:Level6", "arn": "arn:aws:sts::811596193553:assumed-role/Level6/Level6", "accountId": "811596193553", "accessKeyId": "ASIAAXIUSDPQGYAORY8A", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:09:27Z"}, "sessionIssuer": {"type": "Role", "principalId": "AROAI4E1FBACLY3FPC6BB", "arn": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "userName": "Level6"}}}, "requestParameters": {"logGroupName": "/aws/lambda/Level6", "logStreamName": "2018/06/21/[$LATEST]46be99f137552587c1fc416511d283cb"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d90e7a87-fc9b-4125-b9a1-7c9baa6d8fb0", "record_id": "flaws_cloudtrail:0000059:d90e7a87-fc9b-4125-b9a1-7c9baa6d8fb0", "row_index": 59, "timestamp": "2018-06-21T22:09:27Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "lambda.amazonaws.com", "user_agent": "lambda.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/service-role/Level6"], "raw_record_size_bytes": 1214, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d90e7a87-fc9b-4125-b9a1-7c9baa6d8fb0", "eventTime": "2018-06-21T22:09:27Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "lambda.amazonaws.com", "userAgent": "lambda.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "lambda.amazonaws.com"}, "requestParameters": {"roleSessionName": "Level6", "roleArn": "arn:aws:iam::811596193553:role/service-role/Level6"}, "responseElements": {"credentials": {"accessKeyId": "ASIAAXIUSDPQGYAORY8A", "expiration": "Jun 22, 2018 10:09:27 AM", "sessionToken": "FQoDYXdzEDcaDMh+4gP+W4iUbTkeWCLfAZIUY5ECpFOb4YcUtoR8sCMpFu9973DhfZRvf8YHLMk48rjkINixfdDHlNts9o9netEYM1GD3+tlsAh+S34l1llMRLNikIE+5KfMiyojVRqmPpNcq+UzuNU2peZi4i6hXWc6rs8LFpetLdkuywynj0nEylAGm/WfEHDPFez/XaCZB4UppaeSbAfHNlBNGvV8MrV0T+mUQhSg5n5tNErr9MOFiwxAZAzQPtk5ly21Q1ZndQZhBPnM3YPOu6zIRMzomCMyyQ4X9OUJY4NHqANRHtQH8OxUXwDWwn7XFZ0TZVAol8Sw2QU="}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/service-role/Level6", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "96b8db69-35b1-494e-a5a1-3d18e9583ee7", "record_id": "flaws_cloudtrail:0000060:96b8db69-35b1-494e-a5a1-3d18e9583ee7", "row_index": 60, "timestamp": "2018-06-21T22:10:31Z", "event_type": "ListAttachedUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAA06U2DRE4AC23A8H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.152.97.53", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 593, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "96b8db69-35b1-494e-a5a1-3d18e9583ee7", "eventTime": "2018-06-21T22:10:31Z", "eventName": "ListAttachedUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.152.97.53", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAA06U2DRE4AC23A8H", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74958c6b-3d48-4a76-8eff-945baffd8ba1", "record_id": "flaws_cloudtrail:0000061:74958c6b-3d48-4a76-8eff-945baffd8ba1", "row_index": 61, "timestamp": "2018-06-21T22:13:43Z", "event_type": "GetUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAA06U2DRE4AC23A8H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.152.97.53", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 576, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74958c6b-3d48-4a76-8eff-945baffd8ba1", "eventTime": "2018-06-21T22:13:43Z", "eventName": "GetUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.152.97.53", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAA06U2DRE4AC23A8H", "userName": "backup"}, "requestParameters": {"userName": "backup"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "229f803f-2757-436f-bbc5-502e0e8840bc", "record_id": "flaws_cloudtrail:0000062:229f803f-2757-436f-bbc5-502e0e8840bc", "row_index": 62, "timestamp": "2018-06-21T22:18:51Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAA06U2DRE4AC23A8H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.152.97.53", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/backup-elevated-23"], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "229f803f-2757-436f-bbc5-502e0e8840bc", "eventTime": "2018-06-21T22:18:51Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.152.97.53", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAA06U2DRE4AC23A8H", "userName": "backup"}, "requestParameters": {"roleArn": "arn:aws:iam::811596193553:role/backup-elevated-23", "roleSessionName": "backup-session"}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/backup-elevated-23"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "449bbc6d-9f23-4e6c-bbf7-772fdcc9f592", "record_id": "flaws_cloudtrail:0000063:449bbc6d-9f23-4e6c-bbf7-772fdcc9f592", "row_index": 63, "timestamp": "2018-06-21T22:20:42Z", "event_type": "GetObject", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIAA06U2DRE4AC23A8H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "105.152.97.53", "user_agent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:s3:::prod-data-9431"], "raw_record_size_bytes": 663, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "449bbc6d-9f23-4e6c-bbf7-772fdcc9f592", "eventTime": "2018-06-21T22:20:42Z", "eventName": "GetObject", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "105.152.97.53", "userAgent": "aws-sdk-java/1.11.879 Linux/4.14.225-169.362.amzn2.x86_64 OpenJDK_64-Bit_Server_VM/25.275-b01", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIAA06U2DRE4AC23A8H", "userName": "backup"}, "requestParameters": {"bucketName": "prod-data-9431", "key": "reports/166.csv"}, "resources": [{"ARN": "arn:aws:s3:::prod-data-9431"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "380085-9a65-4787-abef-5bb4cfa1c845", "record_id": "flaws_cloudtrail:0000064:380085-9a65-4787-abef-5bb4cfa1c845", "row_index": 64, "timestamp": "2018-06-21T22:25:48Z", "event_type": "AssumeRole", "event_source": "sts.amazonaws.com", "principal": {"type": "AWSService", "arn": null, "account_id": null, "principal_id": null, "user_name": null, "access_key_id": null, "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2.amazonaws.com", "user_agent": "ec2.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:iam::811596193553:role/flaws"], "raw_record_size_bytes": 1476, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "resources", "responseElements", "sharedEventID", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "380085-9a65-4787-abef-5bb4cfa1c845", "eventTime": "2018-06-21T22:25:48Z", "eventName": "AssumeRole", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2.amazonaws.com", "userAgent": "ec2.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "AWSService", "invokedBy": "ec2.amazonaws.com"}, "requestParameters": {"roleSessionName": "i-aa2d3b42e5c6e801a", "roleArn": "arn:aws:iam::811596193553:role/flaws"}, "responseElements": {"credentials": {"accessKeyId": "ASIADM7IANUEVFOENH16", "expiration": "Jun 22, 2018 4:42:26 AM", "sessionToken": "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"}}, "resources": [{"ARN": "arn:aws:iam::811596193553:role/flaws", "accountId": "811596193553", "type": "AWS::IAM::Role"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc466630-68d1-4a63-84b8-bb2d6b0e8435", "record_id": "flaws_cloudtrail:0000065:bc466630-68d1-4a63-84b8-bb2d6b0e8435", "row_index": 65, "timestamp": "2018-06-21T22:43:49Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc466630-68d1-4a63-84b8-bb2d6b0e8435", "eventTime": "2018-06-21T22:43:49Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "417fe9f5-c1b1-475f-bb8e-b995e7eba2bf", "record_id": "flaws_cloudtrail:0000066:417fe9f5-c1b1-475f-bb8e-b995e7eba2bf", "row_index": 66, "timestamp": "2018-06-21T22:43:58Z", "event_type": "ListUsers", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 668, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "417fe9f5-c1b1-475f-bb8e-b995e7eba2bf", "eventTime": "2018-06-21T22:43:58Z", "eventName": "ListUsers", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af35f6cb-e73e-44ef-84d3-e4335be8d211", "record_id": "flaws_cloudtrail:0000067:af35f6cb-e73e-44ef-84d3-e4335be8d211", "row_index": 67, "timestamp": "2018-06-21T22:43:59Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af35f6cb-e73e-44ef-84d3-e4335be8d211", "eventTime": "2018-06-21T22:43:59Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b3ee488-424b-42fe-8573-3a4f94579f87", "record_id": "flaws_cloudtrail:0000068:5b3ee488-424b-42fe-8573-3a4f94579f87", "row_index": 68, "timestamp": "2018-06-21T22:44:00Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 673, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b3ee488-424b-42fe-8573-3a4f94579f87", "eventTime": "2018-06-21T22:44:00Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4c0406-c521-4325-a966-e2869b01bd71", "record_id": "flaws_cloudtrail:0000069:3e4c0406-c521-4325-a966-e2869b01bd71", "row_index": 69, "timestamp": "2018-06-21T22:44:00Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 790, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4c0406-c521-4325-a966-e2869b01bd71", "eventTime": "2018-06-21T22:44:00Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Cannot find Login Profile for User backup", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4c986645-e558-45f0-976f-8db135531f8d", "record_id": "flaws_cloudtrail:0000070:c4c986645-e558-45f0-976f-8db135531f8d", "row_index": 70, "timestamp": "2018-06-21T22:44:00Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4c986645-e558-45f0-976f-8db135531f8d", "eventTime": "2018-06-21T22:44:00Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1abd8f70-2440-44ce-afc8-c4dab1bf326d", "record_id": "flaws_cloudtrail:0000071:1abd8f70-2440-44ce-afc8-c4dab1bf326d", "row_index": 71, "timestamp": "2018-06-21T22:44:01Z", "event_type": "ListPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1abd8f70-2440-44ce-afc8-c4dab1bf326d", "eventTime": "2018-06-21T22:44:01Z", "eventName": "ListPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"onlyAttached": true}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9267a880-9032-4368-89f2-1cc56d68e5c6", "record_id": "flaws_cloudtrail:0000072:9267a880-9032-4368-89f2-1cc56d68e5c6", "row_index": 72, "timestamp": "2018-06-21T22:44:01Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9267a880-9032-4368-89f2-1cc56d68e5c6", "eventTime": "2018-06-21T22:44:01Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd5ed9dc-6931-442e-a181-672085c9b55", "record_id": "flaws_cloudtrail:0000073:dd5ed9dc-6931-442e-a181-672085c9b55", "row_index": 73, "timestamp": "2018-06-21T22:44:02Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd5ed9dc-6931-442e-a181-672085c9b55", "eventTime": "2018-06-21T22:44:02Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e86f330f-21a4-4d4d-9a0f-c3aecdd18517", "record_id": "flaws_cloudtrail:0000074:e86f330f-21a4-4d4d-9a0f-c3aecdd18517", "row_index": 74, "timestamp": "2018-06-21T22:44:02Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e86f330f-21a4-4d4d-9a0f-c3aecdd18517", "eventTime": "2018-06-21T22:44:02Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36321dd3-30ad-4baf-9314-410aea4311d4", "record_id": "flaws_cloudtrail:0000075:36321dd3-30ad-4baf-9314-410aea4311d4", "row_index": 75, "timestamp": "2018-06-21T22:44:02Z", "event_type": "GetRolePolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36321dd3-30ad-4baf-9314-410aea4311d4", "eventTime": "2018-06-21T22:44:02Z", "eventName": "GetRolePolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyName": "read_level_6_bucket", "roleName": "flaws"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "121574-2d61-4e00-9366-fbf14d878d07", "record_id": "flaws_cloudtrail:0000076:121574-2d61-4e00-9366-fbf14d878d07", "row_index": 76, "timestamp": "2018-06-21T22:44:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "121574-2d61-4e00-9366-fbf14d878d07", "eventTime": "2018-06-21T22:44:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSConfigRole", "versionId": "v15"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7a6d57a-63fa-4739-bd2b-7daf5016bb25", "record_id": "flaws_cloudtrail:0000077:c7a6d57a-63fa-4739-bd2b-7daf5016bb25", "row_index": 77, "timestamp": "2018-06-21T22:44:03Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 757, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7a6d57a-63fa-4739-bd2b-7daf5016bb25", "eventTime": "2018-06-21T22:44:03Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways", "versionId": "v4"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f747ff65-bd4e-4dad-b13c-950dec6cea23", "record_id": "flaws_cloudtrail:0000078:f747ff65-bd4e-4dad-b13c-950dec6cea23", "row_index": 78, "timestamp": "2018-06-21T22:44:04Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f747ff65-bd4e-4dad-b13c-950dec6cea23", "eventTime": "2018-06-21T22:44:04Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/service-role/AWSConfigRole"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "67b84c02-3d49-47ec-89b6-410739d05cf", "record_id": "flaws_cloudtrail:0000079:67b84c02-3d49-47ec-89b6-410739d05cf", "row_index": 79, "timestamp": "2018-06-21T22:44:04Z", "event_type": "ListRolePolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "67b84c02-3d49-47ec-89b6-410739d05cf", "eventTime": "2018-06-21T22:44:04Z", "eventName": "ListRolePolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SecurityMonkey"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "57d6391b-42aa-41ce-8182-1434aaf2dc2e", "record_id": "flaws_cloudtrail:0000080:57d6391b-42aa-41ce-8182-1434aaf2dc2e", "row_index": 80, "timestamp": "2018-06-21T22:44:05Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "57d6391b-42aa-41ce-8182-1434aaf2dc2e", "eventTime": "2018-06-21T22:44:05Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41570bc4-9d47-4571-a362-7a8d6ae93b2e", "record_id": "flaws_cloudtrail:0000081:41570bc4-9d47-4571-a362-7a8d6ae93b2e", "row_index": 81, "timestamp": "2018-06-21T22:44:05Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41570bc4-9d47-4571-a362-7a8d6ae93b2e", "eventTime": "2018-06-21T22:44:05Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/AWSLambdaBasicExecutionRole-d306bccd-4ecb-4557-a96f-9dbc7460dddc", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae76091-495d-4910-ab78-ea3952e69b66", "record_id": "flaws_cloudtrail:0000082:ae76091-495d-4910-ab78-ea3952e69b66", "row_index": 82, "timestamp": "2018-06-21T22:44:06Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 760, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae76091-495d-4910-ab78-ea3952e69b66", "eventTime": "2018-06-21T22:44:06Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms", "versionId": "v1"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59ccf224-dc2d-4bec-8fd9-96ba8f983e4b", "record_id": "flaws_cloudtrail:0000083:59ccf224-dc2d-4bec-8fd9-96ba8f983e4b", "row_index": 83, "timestamp": "2018-06-21T22:44:06Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59ccf224-dc2d-4bec-8fd9-96ba8f983e4b", "eventTime": "2018-06-21T22:44:06Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/list_apigateways"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e4a3a820-c6e4-4200-a86c-ba8e07b123e7", "record_id": "flaws_cloudtrail:0000084:e4a3a820-c6e4-4200-a86c-ba8e07b123e7", "row_index": 84, "timestamp": "2018-06-21T22:44:09Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e4a3a820-c6e4-4200-a86c-ba8e07b123e7", "eventTime": "2018-06-21T22:44:09Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3", "versionId": "v10"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78b638be-fd8e-43f0-bb00-a2b8060b7d90", "record_id": "flaws_cloudtrail:0000085:78b638be-fd8e-43f0-bb00-a2b8060b7d90", "row_index": 85, "timestamp": "2018-06-21T22:44:09Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78b638be-fd8e-43f0-bb00-a2b8060b7d90", "eventTime": "2018-06-21T22:44:09Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/SecurityMonkeyPerms"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eacf549-4973-41fe-bf8e-818dc9b5ebce", "record_id": "flaws_cloudtrail:0000086:3eacf549-4973-41fe-bf8e-818dc9b5ebce", "row_index": 86, "timestamp": "2018-06-21T22:44:10Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eacf549-4973-41fe-bf8e-818dc9b5ebce", "eventTime": "2018-06-21T22:44:10Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/config-role-us-west-2_AWSConfigDeliveryPermissions_us-west-2", "versionId": "v2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94016b48-aa01-4b0c-9d71-e5a90c6c8278", "record_id": "flaws_cloudtrail:0000087:94016b48-aa01-4b0c-9d71-e5a90c6c8278", "row_index": 87, "timestamp": "2018-06-21T22:44:10Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94016b48-aa01-4b0c-9d71-e5a90c6c8278", "eventTime": "2018-06-21T22:44:10Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "AWSServiceRoleForOrganizations"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a57e803-7a6d-4e5f-b93c-b0fb017ac5f7", "record_id": "flaws_cloudtrail:0000088:8a57e803-7a6d-4e5f-b93c-b0fb017ac5f7", "row_index": 88, "timestamp": "2018-06-21T22:44:11Z", "event_type": "ListUserPolicies", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a57e803-7a6d-4e5f-b93c-b0fb017ac5f7", "eventTime": "2018-06-21T22:44:11Z", "eventName": "ListUserPolicies", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "542dc8b0-50ce-450f-954a-52068df5e990", "record_id": "flaws_cloudtrail:0000089:542dc8b0-50ce-450f-954a-52068df5e990", "row_index": 89, "timestamp": "2018-06-21T22:44:13Z", "event_type": "GetPolicyVersion", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "542dc8b0-50ce-450f-954a-52068df5e990", "eventTime": "2018-06-21T22:44:13Z", "eventName": "GetPolicyVersion", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::aws:policy/SecurityAudit", "versionId": "v19"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b5b125d-8297-402b-8a6f-dde348b57ce5", "record_id": "flaws_cloudtrail:0000090:6b5b125d-8297-402b-8a6f-dde348b57ce5", "row_index": 90, "timestamp": "2018-06-21T22:44:13Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b5b125d-8297-402b-8a6f-dde348b57ce5", "eventTime": "2018-06-21T22:44:13Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "938965-27ba-460c-8033-a841eba946e5", "record_id": "flaws_cloudtrail:0000091:938965-27ba-460c-8033-a841eba946e5", "row_index": 91, "timestamp": "2018-06-21T22:44:18Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "938965-27ba-460c-8033-a841eba946e5", "eventTime": "2018-06-21T22:44:18Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/service-role/config-role-us-west-2_AWSConfigDeliveryPermissions_us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b318987f8-abc1-4042-a948-ca0e28855", "record_id": "flaws_cloudtrail:0000092:b318987f8-abc1-4042-a948-ca0e28855", "row_index": 92, "timestamp": "2018-06-21T22:44:19Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b318987f8-abc1-4042-a948-ca0e28855", "eventTime": "2018-06-21T22:44:19Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "SummitRouteAudit"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a76ccabd-d16e-49dd-a31c-e882b7f3c963", "record_id": "flaws_cloudtrail:0000093:a76ccabd-d16e-49dd-a31c-e882b7f3c963", "row_index": 93, "timestamp": "2018-06-21T22:44:19Z", "event_type": "ListEntitiesForPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a76ccabd-d16e-49dd-a31c-e882b7f3c963", "eventTime": "2018-06-21T22:44:19Z", "eventName": "ListEntitiesForPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"policyArn": "arn:aws:iam::811596193553:policy/Level3"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fd756434-0180-421c-9fd0-2f634aa8c06d", "record_id": "flaws_cloudtrail:0000094:5fd756434-0180-421c-9fd0-2f634aa8c06d", "row_index": 94, "timestamp": "2018-06-21T22:44:19Z", "event_type": "ListInstanceProfilesForRole", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fd756434-0180-421c-9fd0-2f634aa8c06d", "eventTime": "2018-06-21T22:44:19Z", "eventName": "ListInstanceProfilesForRole", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"roleName": "config-role-us-west-2"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88cfb127-08b2-4aaf-8a89-97f53f55fc6e", "record_id": "flaws_cloudtrail:0000095:88cfb127-08b2-4aaf-8a89-97f53f55fc6e", "row_index": 95, "timestamp": "2018-06-21T22:44:20Z", "event_type": "ListGroupsForUser", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88cfb127-08b2-4aaf-8a89-97f53f55fc6e", "eventTime": "2018-06-21T22:44:20Z", "eventName": "ListGroupsForUser", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6aa933168-7a15-4483-b062-7619c8526cd4", "record_id": "flaws_cloudtrail:0000096:6aa933168-7a15-4483-b062-7619c8526cd4", "row_index": 96, "timestamp": "2018-06-21T22:44:20Z", "event_type": "GetLoginProfile", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 791, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6aa933168-7a15-4483-b062-7619c8526cd4", "eventTime": "2018-06-21T22:44:20Z", "eventName": "GetLoginProfile", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "Cannot find Login Profile for User Level6", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22148f3-9e2b-445d-b7d2-42af46337", "record_id": "flaws_cloudtrail:0000097:22148f3-9e2b-445d-b7d2-42af46337", "row_index": 97, "timestamp": "2018-06-21T22:44:20Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22148f3-9e2b-445d-b7d2-42af46337", "eventTime": "2018-06-21T22:44:20Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ca21ceb-804f-4c89-8b51-b47894d41cd", "record_id": "flaws_cloudtrail:0000098:1ca21ceb-804f-4c89-8b51-b47894d41cd", "row_index": 98, "timestamp": "2018-06-21T22:44:25Z", "event_type": "ListMFADevices", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ca21ceb-804f-4c89-8b51-b47894d41cd", "eventTime": "2018-06-21T22:44:25Z", "eventName": "ListMFADevices", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "179d7792-e458-406d-9985-ffee29b70d41", "record_id": "flaws_cloudtrail:0000099:179d7792-e458-406d-9985-ffee29b70d41", "row_index": 99, "timestamp": "2018-06-21T22:44:30Z", "event_type": "ListAccessKeys", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "179d7792-e458-406d-9985-ffee29b70d41", "eventTime": "2018-06-21T22:44:30Z", "eventName": "ListAccessKeys", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"userName": "piper"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7d02dee-6c44-4ee1-be63-e5f5d1f691fa", "record_id": "flaws_cloudtrail:0000100:f7d02dee-6c44-4ee1-be63-e5f5d1f691fa", "row_index": 100, "timestamp": "2018-06-21T22:44:41Z", "event_type": "GetAccountPasswordPolicy", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7d02dee-6c44-4ee1-be63-e5f5d1f691fa", "eventTime": "2018-06-21T22:44:41Z", "eventName": "GetAccountPasswordPolicy", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "errorCode": "NoSuchEntityException", "errorMessage": "The Password Policy with domain name 811596193553 cannot be found.", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a70efc1-6090-4b4e-a30b-4b37afc79dd8", "record_id": "flaws_cloudtrail:0000101:0a70efc1-6090-4b4e-a30b-4b37afc79dd8", "row_index": 101, "timestamp": "2018-06-21T22:44:42Z", "event_type": "GenerateCredentialReport", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a70efc1-6090-4b4e-a30b-4b37afc79dd8", "eventTime": "2018-06-21T22:44:42Z", "eventName": "GenerateCredentialReport", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54ad5cfc-be2b-46e8-b0e7-2205df946fdd", "record_id": "flaws_cloudtrail:0000102:54ad5cfc-be2b-46e8-b0e7-2205df946fdd", "row_index": 102, "timestamp": "2018-06-21T22:44:43Z", "event_type": "ListDomains", "event_source": "route53domains.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA2410RHVSRZRI369B", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "AWS Internal", "user_agent": "AWS Internal", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 751, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54ad5cfc-be2b-46e8-b0e7-2205df946fdd", "eventTime": "2018-06-21T22:44:43Z", "eventName": "ListDomains", "eventSource": "route53domains.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "AWS Internal", "userAgent": "AWS Internal", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA2410RHVSRZRI369B", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:44:43Z"}}, "invokedBy": "AWS Internal"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09369d5e-500c-42f6-be8b-88e1b0c9d10a", "record_id": "flaws_cloudtrail:0000103:09369d5e-500c-42f6-be8b-88e1b0c9d10a", "row_index": 103, "timestamp": "2018-06-21T22:44:45Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09369d5e-500c-42f6-be8b-88e1b0c9d10a", "eventTime": "2018-06-21T22:44:45Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec34693-e0b0-4851-86dd-0c972fb9b17b", "record_id": "flaws_cloudtrail:0000104:ec34693-e0b0-4851-86dd-0c972fb9b17b", "row_index": 104, "timestamp": "2018-06-21T22:44:45Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec34693-e0b0-4851-86dd-0c972fb9b17b", "eventTime": "2018-06-21T22:44:45Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "002117a7-7b14-4736-954b-d933a88e61ef", "record_id": "flaws_cloudtrail:0000105:002117a7-7b14-4736-954b-d933a88e61ef", "row_index": 105, "timestamp": "2018-06-21T22:44:45Z", "event_type": "ListIdentities", "event_source": "ses.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "002117a7-7b14-4736-954b-d933a88e61ef", "eventTime": "2018-06-21T22:44:45Z", "eventName": "ListIdentities", "eventSource": "ses.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "872ff549-eb7c-4284-bbbd-b19b2c919cbb", "record_id": "flaws_cloudtrail:0000106:872ff549-eb7c-4284-bbbd-b19b2c919cbb", "row_index": 106, "timestamp": "2018-06-21T22:44:48Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "872ff549-eb7c-4284-bbbd-b19b2c919cbb", "eventTime": "2018-06-21T22:44:48Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7e5ffdc-b57d-46d1-afd7-9ee1a3ac9f5c", "record_id": "flaws_cloudtrail:0000107:c7e5ffdc-b57d-46d1-afd7-9ee1a3ac9f5c", "row_index": 107, "timestamp": "2018-06-21T22:44:48Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7e5ffdc-b57d-46d1-afd7-9ee1a3ac9f5c", "eventTime": "2018-06-21T22:44:48Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88aeaf5d-e9ce-480f-8791-c113101accc3", "record_id": "flaws_cloudtrail:0000108:88aeaf5d-e9ce-480f-8791-c113101accc3", "row_index": 108, "timestamp": "2018-06-21T22:44:48Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88aeaf5d-e9ce-480f-8791-c113101accc3", "eventTime": "2018-06-21T22:44:48Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab54f9e5-47f7-4863-948b-9bfc41ec8a77", "record_id": "flaws_cloudtrail:0000109:ab54f9e5-47f7-4863-948b-9bfc41ec8a77", "row_index": 109, "timestamp": "2018-06-21T22:44:48Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab54f9e5-47f7-4863-948b-9bfc41ec8a77", "eventTime": "2018-06-21T22:44:48Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1539d31d-2ace-4992-831d-bbd814ad44d8", "record_id": "flaws_cloudtrail:0000110:1539d31d-2ace-4992-831d-bbd814ad44d8", "row_index": 110, "timestamp": "2018-06-21T22:44:48Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1539d31d-2ace-4992-831d-bbd814ad44d8", "eventTime": "2018-06-21T22:44:48Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93570f9-1506-4054-a448-c03ffb18c1c9", "record_id": "flaws_cloudtrail:0000111:93570f9-1506-4054-a448-c03ffb18c1c9", "row_index": 111, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93570f9-1506-4054-a448-c03ffb18c1c9", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea7ece20-e4ba-4e23-8a89-d6be231fa903", "record_id": "flaws_cloudtrail:0000112:ea7ece20-e4ba-4e23-8a89-d6be231fa903", "row_index": 112, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea7ece20-e4ba-4e23-8a89-d6be231fa903", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bb45c81-cfba-45df-a5d4-56ba3ab528db", "record_id": "flaws_cloudtrail:0000113:7bb45c81-cfba-45df-a5d4-56ba3ab528db", "row_index": 113, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bb45c81-cfba-45df-a5d4-56ba3ab528db", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87c3c39d-ef28-47aa-9cf2-16ac5904a760", "record_id": "flaws_cloudtrail:0000114:87c3c39d-ef28-47aa-9cf2-16ac5904a760", "row_index": 114, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87c3c39d-ef28-47aa-9cf2-16ac5904a760", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88296eed-f6b6-46d7-9ebb-cfd19a4e9cc8", "record_id": "flaws_cloudtrail:0000115:88296eed-f6b6-46d7-9ebb-cfd19a4e9cc8", "row_index": 115, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88296eed-f6b6-46d7-9ebb-cfd19a4e9cc8", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2769a7fa-3afa-4275-bec9-a440a7ca2779", "record_id": "flaws_cloudtrail:0000116:2769a7fa-3afa-4275-bec9-a440a7ca2779", "row_index": 116, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2769a7fa-3afa-4275-bec9-a440a7ca2779", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "166c1ff9-de2c-4ef9-831d-14c3ed611ae0", "record_id": "flaws_cloudtrail:0000117:166c1ff9-de2c-4ef9-831d-14c3ed611ae0", "row_index": 117, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "166c1ff9-de2c-4ef9-831d-14c3ed611ae0", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71beca53-279c-40ae-aa5e-a3c484d69622", "record_id": "flaws_cloudtrail:0000118:71beca53-279c-40ae-aa5e-a3c484d69622", "row_index": 118, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71beca53-279c-40ae-aa5e-a3c484d69622", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75432-27e5-45cb-9486-f6bb803a5aa4", "record_id": "flaws_cloudtrail:0000119:75432-27e5-45cb-9486-f6bb803a5aa4", "row_index": 119, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75432-27e5-45cb-9486-f6bb803a5aa4", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e4df958-3295-40cc-ab0b-57c75a5384a6", "record_id": "flaws_cloudtrail:0000120:3e4df958-3295-40cc-ab0b-57c75a5384a6", "row_index": 120, "timestamp": "2018-06-21T22:44:49Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e4df958-3295-40cc-ab0b-57c75a5384a6", "eventTime": "2018-06-21T22:44:49Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "862892bf6-2bae-4bde-9204-e67e5ba8c69b", "record_id": "flaws_cloudtrail:0000121:862892bf6-2bae-4bde-9204-e67e5ba8c69b", "row_index": 121, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "862892bf6-2bae-4bde-9204-e67e5ba8c69b", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4daee93a-7270-40b6-aa8c-2603490051f0", "record_id": "flaws_cloudtrail:0000122:4daee93a-7270-40b6-aa8c-2603490051f0", "row_index": 122, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4daee93a-7270-40b6-aa8c-2603490051f0", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f7b568a-9b25-4184-8911-620c4cc7bbc0", "record_id": "flaws_cloudtrail:0000123:3f7b568a-9b25-4184-8911-620c4cc7bbc0", "row_index": 123, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f7b568a-9b25-4184-8911-620c4cc7bbc0", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ca80cdd-4df5-4990-92a0-e48afc114c05", "record_id": "flaws_cloudtrail:0000124:6ca80cdd-4df5-4990-92a0-e48afc114c05", "row_index": 124, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ca80cdd-4df5-4990-92a0-e48afc114c05", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb216c38-71af-4c39-b521-eec8c7a8cccc", "record_id": "flaws_cloudtrail:0000125:bb216c38-71af-4c39-b521-eec8c7a8cccc", "row_index": 125, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb216c38-71af-4c39-b521-eec8c7a8cccc", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bd4f18e-0169-4b10-97f2-b610460f594bc", "record_id": "flaws_cloudtrail:0000126:2bd4f18e-0169-4b10-97f2-b610460f594bc", "row_index": 126, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bd4f18e-0169-4b10-97f2-b610460f594bc", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8040b260-259a-4078-bcff-09cd6bd70b5b", "record_id": "flaws_cloudtrail:0000127:8040b260-259a-4078-bcff-09cd6bd70b5b", "row_index": 127, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8040b260-259a-4078-bcff-09cd6bd70b5b", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3856d1bd-c91c-4f58-8b81-58b814b6ff0e", "record_id": "flaws_cloudtrail:0000128:3856d1bd-c91c-4f58-8b81-58b814b6ff0e", "row_index": 128, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3856d1bd-c91c-4f58-8b81-58b814b6ff0e", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04c98d55-b064-49b8-8275-d0b75b9f7c47", "record_id": "flaws_cloudtrail:0000129:04c98d55-b064-49b8-8275-d0b75b9f7c47", "row_index": 129, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04c98d55-b064-49b8-8275-d0b75b9f7c47", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d7bfdeb-5c79-492f-b6b5-e7a964601c442", "record_id": "flaws_cloudtrail:0000130:5d7bfdeb-5c79-492f-b6b5-e7a964601c442", "row_index": 130, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d7bfdeb-5c79-492f-b6b5-e7a964601c442", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28c9665c-95e4-4050-8471-8e3087cf83ae", "record_id": "flaws_cloudtrail:0000131:28c9665c-95e4-4050-8471-8e3087cf83ae", "row_index": 131, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28c9665c-95e4-4050-8471-8e3087cf83ae", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e242531-00bd-470e-84af-d846323e85e6", "record_id": "flaws_cloudtrail:0000132:9e242531-00bd-470e-84af-d846323e85e6", "row_index": 132, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e242531-00bd-470e-84af-d846323e85e6", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2be0da3-02e9-4c18-ae98-c79a6bf9b3a3", "record_id": "flaws_cloudtrail:0000133:e2be0da3-02e9-4c18-ae98-c79a6bf9b3a3", "row_index": 133, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2be0da3-02e9-4c18-ae98-c79a6bf9b3a3", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0db2ccc6-a31c-403d-970d-26e9d0a6d399", "record_id": "flaws_cloudtrail:0000134:0db2ccc6-a31c-403d-970d-26e9d0a6d399", "row_index": 134, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0db2ccc6-a31c-403d-970d-26e9d0a6d399", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc69145-9251-4881-a5e0-73e5fbf425c3", "record_id": "flaws_cloudtrail:0000135:cc69145-9251-4881-a5e0-73e5fbf425c3", "row_index": 135, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc69145-9251-4881-a5e0-73e5fbf425c3", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "111fb2fc-4495-4191-8cbe-d90e6daa1dee", "record_id": "flaws_cloudtrail:0000136:111fb2fc-4495-4191-8cbe-d90e6daa1dee", "row_index": 136, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "111fb2fc-4495-4191-8cbe-d90e6daa1dee", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25b0e35f-3549-4d42-8f9a-d3a551afa930", "record_id": "flaws_cloudtrail:0000137:25b0e35f-3549-4d42-8f9a-d3a551afa930", "row_index": 137, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25b0e35f-3549-4d42-8f9a-d3a551afa930", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e648aaa-265f-43f2-b094-46204f7d1", "record_id": "flaws_cloudtrail:0000138:3e648aaa-265f-43f2-b094-46204f7d1", "row_index": 138, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e648aaa-265f-43f2-b094-46204f7d1", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0300f4e-455b-44bb-a3ca-80cf457302c7", "record_id": "flaws_cloudtrail:0000139:c0300f4e-455b-44bb-a3ca-80cf457302c7", "row_index": 139, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0300f4e-455b-44bb-a3ca-80cf457302c7", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee016101-5361-47d0-bd81-7c89212a", "record_id": "flaws_cloudtrail:0000140:ee016101-5361-47d0-bd81-7c89212a", "row_index": 140, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee016101-5361-47d0-bd81-7c89212a", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dcf3484d-601f-4e0b-a8ff-e756c7c482c9", "record_id": "flaws_cloudtrail:0000141:dcf3484d-601f-4e0b-a8ff-e756c7c482c9", "row_index": 141, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dcf3484d-601f-4e0b-a8ff-e756c7c482c9", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8573b3ab-8e06-42c4-977f-fbc0ba0e89a0", "record_id": "flaws_cloudtrail:0000142:8573b3ab-8e06-42c4-977f-fbc0ba0e89a0", "row_index": 142, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8573b3ab-8e06-42c4-977f-fbc0ba0e89a0", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8e99c08-0b52-4ce6-9e60-7f78c5383e9f", "record_id": "flaws_cloudtrail:0000143:a8e99c08-0b52-4ce6-9e60-7f78c5383e9f", "row_index": 143, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8e99c08-0b52-4ce6-9e60-7f78c5383e9f", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbf6bb63-e001-4910-989e-8f26b8e5d3df", "record_id": "flaws_cloudtrail:0000144:fbf6bb63-e001-4910-989e-8f26b8e5d3df", "row_index": 144, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbf6bb63-e001-4910-989e-8f26b8e5d3df", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b22da64a-f2c9-4fae-93f1-87eb588198b9c", "record_id": "flaws_cloudtrail:0000145:b22da64a-f2c9-4fae-93f1-87eb588198b9c", "row_index": 145, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b22da64a-f2c9-4fae-93f1-87eb588198b9c", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23df9363-b32d-4123-a22a-946a8a99de01", "record_id": "flaws_cloudtrail:0000146:23df9363-b32d-4123-a22a-946a8a99de01", "row_index": 146, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23df9363-b32d-4123-a22a-946a8a99de01", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bf1caef6-953b-4877-9af0-7c6f878505b9", "record_id": "flaws_cloudtrail:0000147:bf1caef6-953b-4877-9af0-7c6f878505b9", "row_index": 147, "timestamp": "2018-06-21T22:44:50Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bf1caef6-953b-4877-9af0-7c6f878505b9", "eventTime": "2018-06-21T22:44:50Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e442384d-97a1-482e-94df-21abedc857d6", "record_id": "flaws_cloudtrail:0000148:e442384d-97a1-482e-94df-21abedc857d6", "row_index": 148, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e442384d-97a1-482e-94df-21abedc857d6", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90e05397-adaf-4311-b481-0e083924ac7", "record_id": "flaws_cloudtrail:0000149:90e05397-adaf-4311-b481-0e083924ac7", "row_index": 149, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90e05397-adaf-4311-b481-0e083924ac7", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6fbcd96f-c9c5-47ee-8c6d-0246c95f486a", "record_id": "flaws_cloudtrail:0000150:6fbcd96f-c9c5-47ee-8c6d-0246c95f486a", "row_index": 150, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6fbcd96f-c9c5-47ee-8c6d-0246c95f486a", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a424748-7cb2-44a0-9d4e-81a2a73ff7dd", "record_id": "flaws_cloudtrail:0000151:a424748-7cb2-44a0-9d4e-81a2a73ff7dd", "row_index": 151, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a424748-7cb2-44a0-9d4e-81a2a73ff7dd", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5667ab9a-3406-4d0a-8715-a231900c26", "record_id": "flaws_cloudtrail:0000152:5667ab9a-3406-4d0a-8715-a231900c26", "row_index": 152, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5667ab9a-3406-4d0a-8715-a231900c26", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a5c66c4-4dbd-4d9f-a339-d1bc6030fbe5", "record_id": "flaws_cloudtrail:0000153:8a5c66c4-4dbd-4d9f-a339-d1bc6030fbe5", "row_index": 153, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a5c66c4-4dbd-4d9f-a339-d1bc6030fbe5", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b6335b1d-e1ee-47b4-83dd-03dcde92e2fb", "record_id": "flaws_cloudtrail:0000154:b6335b1d-e1ee-47b4-83dd-03dcde92e2fb", "row_index": 154, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b6335b1d-e1ee-47b4-83dd-03dcde92e2fb", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44e41973-7800-48a8-ba15-b30fc479d44d", "record_id": "flaws_cloudtrail:0000155:44e41973-7800-48a8-ba15-b30fc479d44d", "row_index": 155, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44e41973-7800-48a8-ba15-b30fc479d44d", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19b68da0-6695-44a9-9131-5ab4d53b56d0", "record_id": "flaws_cloudtrail:0000156:19b68da0-6695-44a9-9131-5ab4d53b56d0", "row_index": 156, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19b68da0-6695-44a9-9131-5ab4d53b56d0", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46acc451-3225-4da7-baae-86f7b94248e1", "record_id": "flaws_cloudtrail:0000157:46acc451-3225-4da7-baae-86f7b94248e1", "row_index": 157, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46acc451-3225-4da7-baae-86f7b94248e1", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09fb0480-6c22-4515-9e9b-406d3eda88c1", "record_id": "flaws_cloudtrail:0000158:09fb0480-6c22-4515-9e9b-406d3eda88c1", "row_index": 158, "timestamp": "2018-06-21T22:44:51Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09fb0480-6c22-4515-9e9b-406d3eda88c1", "eventTime": "2018-06-21T22:44:51Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "89429-fc46-48ed-aa8a-3b639ab14360", "record_id": "flaws_cloudtrail:0000159:89429-fc46-48ed-aa8a-3b639ab14360", "row_index": 159, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "89429-fc46-48ed-aa8a-3b639ab14360", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1a74517-91a3-4d11-8c07-335a380550", "record_id": "flaws_cloudtrail:0000160:b1a74517-91a3-4d11-8c07-335a380550", "row_index": 160, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1a74517-91a3-4d11-8c07-335a380550", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1eec7397-914e-4406-834c-0a72dfa9d992", "record_id": "flaws_cloudtrail:0000161:1eec7397-914e-4406-834c-0a72dfa9d992", "row_index": 161, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1eec7397-914e-4406-834c-0a72dfa9d992", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6050ee6b-31cb-49b2-900e-e9b00e898d95", "record_id": "flaws_cloudtrail:0000162:6050ee6b-31cb-49b2-900e-e9b00e898d95", "row_index": 162, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6050ee6b-31cb-49b2-900e-e9b00e898d95", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3ea06254-3aea-464a-ad9a-5188e42e5c22", "record_id": "flaws_cloudtrail:0000163:3ea06254-3aea-464a-ad9a-5188e42e5c22", "row_index": 163, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3ea06254-3aea-464a-ad9a-5188e42e5c22", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f54456c-c16e-4077-82fa-4aadd43c7d7c", "record_id": "flaws_cloudtrail:0000164:8f54456c-c16e-4077-82fa-4aadd43c7d7c", "row_index": 164, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f54456c-c16e-4077-82fa-4aadd43c7d7c", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "673a5f57-254e-4079-b091-63868d96b407", "record_id": "flaws_cloudtrail:0000165:673a5f57-254e-4079-b091-63868d96b407", "row_index": 165, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "673a5f57-254e-4079-b091-63868d96b407", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ea7ae47-eaac-463c-9c1b-b0337ebfe821", "record_id": "flaws_cloudtrail:0000166:2ea7ae47-eaac-463c-9c1b-b0337ebfe821", "row_index": 166, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ea7ae47-eaac-463c-9c1b-b0337ebfe821", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2554a67b-8dc9-49cb-811e-a98f89e15895", "record_id": "flaws_cloudtrail:0000167:2554a67b-8dc9-49cb-811e-a98f89e15895", "row_index": 167, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2554a67b-8dc9-49cb-811e-a98f89e15895", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "219ba291-3486-4545-9279-8a3e7e9025f7", "record_id": "flaws_cloudtrail:0000168:219ba291-3486-4545-9279-8a3e7e9025f7", "row_index": 168, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "219ba291-3486-4545-9279-8a3e7e9025f7", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c29f3e63-2e14-4274-a688-ddfe77d5a337", "record_id": "flaws_cloudtrail:0000169:c29f3e63-2e14-4274-a688-ddfe77d5a337", "row_index": 169, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c29f3e63-2e14-4274-a688-ddfe77d5a337", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c21d2f67-f079-445b-b7dc-af3ce45a970a", "record_id": "flaws_cloudtrail:0000170:c21d2f67-f079-445b-b7dc-af3ce45a970a", "row_index": 170, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c21d2f67-f079-445b-b7dc-af3ce45a970a", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21f6af2c-1872-46d2-9110-0f71c75447", "record_id": "flaws_cloudtrail:0000171:21f6af2c-1872-46d2-9110-0f71c75447", "row_index": 171, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21f6af2c-1872-46d2-9110-0f71c75447", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7a82c10-7921-4a21-b7fd-c7367cd95b10", "record_id": "flaws_cloudtrail:0000172:a7a82c10-7921-4a21-b7fd-c7367cd95b10", "row_index": 172, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBParameterGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7a82c10-7921-4a21-b7fd-c7367cd95b10", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBParameterGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25ad6512-122f-4ed8-a57e-212fda47d899", "record_id": "flaws_cloudtrail:0000173:25ad6512-122f-4ed8-a57e-212fda47d899", "row_index": 173, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25ad6512-122f-4ed8-a57e-212fda47d899", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0dece413-7d84-4288-9a4e-4c4661088351", "record_id": "flaws_cloudtrail:0000174:0dece413-7d84-4288-9a4e-4c4661088351", "row_index": 174, "timestamp": "2018-06-21T22:44:52Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0dece413-7d84-4288-9a4e-4c4661088351", "eventTime": "2018-06-21T22:44:52Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5846f83d-40a1-44db-a2f3-868671ef270ad", "record_id": "flaws_cloudtrail:0000175:5846f83d-40a1-44db-a2f3-868671ef270ad", "row_index": 175, "timestamp": "2018-06-21T22:44:53Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5846f83d-40a1-44db-a2f3-868671ef270ad", "eventTime": "2018-06-21T22:44:53Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c1e3444-5adb-4191-bedf-72eb055227e3", "record_id": "flaws_cloudtrail:0000176:1c1e3444-5adb-4191-bedf-72eb055227e3", "row_index": 176, "timestamp": "2018-06-21T22:44:53Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c1e3444-5adb-4191-bedf-72eb055227e3", "eventTime": "2018-06-21T22:44:53Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4e723e9-5d6e-44ad-a3df-ef7f42277afd", "record_id": "flaws_cloudtrail:0000177:b4e723e9-5d6e-44ad-a3df-ef7f42277afd", "row_index": 177, "timestamp": "2018-06-21T22:44:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4e723e9-5d6e-44ad-a3df-ef7f42277afd", "eventTime": "2018-06-21T22:44:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3cdaa93-3ad8-41e5-9d3c-d2fa76995531", "record_id": "flaws_cloudtrail:0000178:f3cdaa93-3ad8-41e5-9d3c-d2fa76995531", "row_index": 178, "timestamp": "2018-06-21T22:44:53Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3cdaa93-3ad8-41e5-9d3c-d2fa76995531", "eventTime": "2018-06-21T22:44:53Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e2940ab-6183-493d-9f6d-953f28a4654d", "record_id": "flaws_cloudtrail:0000179:6e2940ab-6183-493d-9f6d-953f28a4654d", "row_index": 179, "timestamp": "2018-06-21T22:44:53Z", "event_type": "DescribeDBSubnetGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e2940ab-6183-493d-9f6d-953f28a4654d", "eventTime": "2018-06-21T22:44:53Z", "eventName": "DescribeDBSubnetGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf7f61b7-9d0f-4223-8d62-8e7cd9d4bee6", "record_id": "flaws_cloudtrail:0000180:cf7f61b7-9d0f-4223-8d62-8e7cd9d4bee6", "row_index": 180, "timestamp": "2018-06-21T22:44:53Z", "event_type": "DescribeDBSecurityGroups", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf7f61b7-9d0f-4223-8d62-8e7cd9d4bee6", "eventTime": "2018-06-21T22:44:53Z", "eventName": "DescribeDBSecurityGroups", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52793b94-9484-44bc-809c-daf652040824", "record_id": "flaws_cloudtrail:0000181:52793b94-9484-44bc-809c-daf652040824", "row_index": 181, "timestamp": "2018-06-21T22:44:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52793b94-9484-44bc-809c-daf652040824", "eventTime": "2018-06-21T22:44:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7e70ebe-c811-4058-96f9-cb80f57a060b", "record_id": "flaws_cloudtrail:0000182:d7e70ebe-c811-4058-96f9-cb80f57a060b", "row_index": 182, "timestamp": "2018-06-21T22:44:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7e70ebe-c811-4058-96f9-cb80f57a060b", "eventTime": "2018-06-21T22:44:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c26a66d7-6032-4ead-bd44-515404b6b1f0a", "record_id": "flaws_cloudtrail:0000183:c26a66d7-6032-4ead-bd44-515404b6b1f0a", "row_index": 183, "timestamp": "2018-06-21T22:44:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c26a66d7-6032-4ead-bd44-515404b6b1f0a", "eventTime": "2018-06-21T22:44:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eac5efa6-bed7-4d24-8870-c8034d1ad744", "record_id": "flaws_cloudtrail:0000184:eac5efa6-bed7-4d24-8870-c8034d1ad744", "row_index": 184, "timestamp": "2018-06-21T22:44:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eac5efa6-bed7-4d24-8870-c8034d1ad744", "eventTime": "2018-06-21T22:44:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1526f411-813d-41c0-b866-816171e5933bb", "record_id": "flaws_cloudtrail:0000185:1526f411-813d-41c0-b866-816171e5933bb", "row_index": 185, "timestamp": "2018-06-21T22:44:55Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1526f411-813d-41c0-b866-816171e5933bb", "eventTime": "2018-06-21T22:44:55Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc67dee7-83bc-4848-8a9c-7fdbca5c76b6", "record_id": "flaws_cloudtrail:0000186:fc67dee7-83bc-4848-8a9c-7fdbca5c76b6", "row_index": 186, "timestamp": "2018-06-21T22:44:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc67dee7-83bc-4848-8a9c-7fdbca5c76b6", "eventTime": "2018-06-21T22:44:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1156ff27-7d0a-402e-ae42-1d775fef5b33", "record_id": "flaws_cloudtrail:0000187:1156ff27-7d0a-402e-ae42-1d775fef5b33", "row_index": 187, "timestamp": "2018-06-21T22:44:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1156ff27-7d0a-402e-ae42-1d775fef5b33", "eventTime": "2018-06-21T22:44:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df24c01c-3ff9-4caf-8cef-5b76ebaeb1a0", "record_id": "flaws_cloudtrail:0000188:df24c01c-3ff9-4caf-8cef-5b76ebaeb1a0", "row_index": 188, "timestamp": "2018-06-21T22:44:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df24c01c-3ff9-4caf-8cef-5b76ebaeb1a0", "eventTime": "2018-06-21T22:44:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e8dd7df-3820-476f-8593-18c1e94e29a9", "record_id": "flaws_cloudtrail:0000189:9e8dd7df-3820-476f-8593-18c1e94e29a9", "row_index": 189, "timestamp": "2018-06-21T22:44:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e8dd7df-3820-476f-8593-18c1e94e29a9", "eventTime": "2018-06-21T22:44:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cfc6526-7e8e-4e13-a80b-552726e72a7b", "record_id": "flaws_cloudtrail:0000190:8cfc6526-7e8e-4e13-a80b-552726e72a7b", "row_index": 190, "timestamp": "2018-06-21T22:44:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cfc6526-7e8e-4e13-a80b-552726e72a7b", "eventTime": "2018-06-21T22:44:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42aed022-b091-4158-a43c-9523a29cf730", "record_id": "flaws_cloudtrail:0000191:42aed022-b091-4158-a43c-9523a29cf730", "row_index": 191, "timestamp": "2018-06-21T22:44:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42aed022-b091-4158-a43c-9523a29cf730", "eventTime": "2018-06-21T22:44:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd71bfb3-5cd8-4098-9ed1-1c71716b6", "record_id": "flaws_cloudtrail:0000192:fd71bfb3-5cd8-4098-9ed1-1c71716b6", "row_index": 192, "timestamp": "2018-06-21T22:44:56Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd71bfb3-5cd8-4098-9ed1-1c71716b6", "eventTime": "2018-06-21T22:44:56Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be4868ca-ce8f-402d-ba29-7f44e1ce6c14", "record_id": "flaws_cloudtrail:0000193:be4868ca-ce8f-402d-ba29-7f44e1ce6c14", "row_index": 193, "timestamp": "2018-06-21T22:44:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be4868ca-ce8f-402d-ba29-7f44e1ce6c14", "eventTime": "2018-06-21T22:44:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "868fc4c8-bf35-4089-af56-8c75e3c93871", "record_id": "flaws_cloudtrail:0000194:868fc4c8-bf35-4089-af56-8c75e3c93871", "row_index": 194, "timestamp": "2018-06-21T22:44:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "868fc4c8-bf35-4089-af56-8c75e3c93871", "eventTime": "2018-06-21T22:44:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad3bf492-ec93-4e67-9936-c19106efe432", "record_id": "flaws_cloudtrail:0000195:ad3bf492-ec93-4e67-9936-c19106efe432", "row_index": 195, "timestamp": "2018-06-21T22:44:57Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad3bf492-ec93-4e67-9936-c19106efe432", "eventTime": "2018-06-21T22:44:57Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "106423e-dd1c-4b6e-9c53-a26c3afa7711", "record_id": "flaws_cloudtrail:0000196:106423e-dd1c-4b6e-9c53-a26c3afa7711", "row_index": 196, "timestamp": "2018-06-21T22:44:57Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "106423e-dd1c-4b6e-9c53-a26c3afa7711", "eventTime": "2018-06-21T22:44:57Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"name": "arn:aws:cloudtrail:us-west-2:811596193553:trail/cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a98fc82d-7f32-48f1-a5df-288c8b55de8e", "record_id": "flaws_cloudtrail:0000197:a98fc82d-7f32-48f1-a5df-288c8b55de8e", "row_index": 197, "timestamp": "2018-06-21T22:44:59Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a98fc82d-7f32-48f1-a5df-288c8b55de8e", "eventTime": "2018-06-21T22:44:59Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "517f2dd5-6fb2-4e99-9334-7027d55afe54", "record_id": "flaws_cloudtrail:0000198:517f2dd5-6fb2-4e99-9334-7027d55afe54", "row_index": 198, "timestamp": "2018-06-21T22:44:59Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "517f2dd5-6fb2-4e99-9334-7027d55afe54", "eventTime": "2018-06-21T22:44:59Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0ff6abe-7eef-49bf-91ac-0301689e160c", "record_id": "flaws_cloudtrail:0000199:d0ff6abe-7eef-49bf-91ac-0301689e160c", "row_index": 199, "timestamp": "2018-06-21T22:45:00Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0ff6abe-7eef-49bf-91ac-0301689e160c", "eventTime": "2018-06-21T22:45:00Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbe699459-9394-429a-a27f-22a20deaf266", "record_id": "flaws_cloudtrail:0000200:bbe699459-9394-429a-a27f-22a20deaf266", "row_index": 200, "timestamp": "2018-06-21T22:45:00Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbe699459-9394-429a-a27f-22a20deaf266", "eventTime": "2018-06-21T22:45:00Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd704ef5-4683-49a0-a2a3-a2e7dfda4690", "record_id": "flaws_cloudtrail:0000201:dd704ef5-4683-49a0-a2a3-a2e7dfda4690", "row_index": 201, "timestamp": "2018-06-21T22:45:00Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd704ef5-4683-49a0-a2a3-a2e7dfda4690", "eventTime": "2018-06-21T22:45:00Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f3efcbc-e8e9-4633-a842-04ce468f3bbf", "record_id": "flaws_cloudtrail:0000202:4f3efcbc-e8e9-4633-a842-04ce468f3bbf", "row_index": 202, "timestamp": "2018-06-21T22:45:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f3efcbc-e8e9-4633-a842-04ce468f3bbf", "eventTime": "2018-06-21T22:45:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdeb76f8-9801-49d6-ac0a-b9a53d3856a9", "record_id": "flaws_cloudtrail:0000203:cdeb76f8-9801-49d6-ac0a-b9a53d3856a9", "row_index": 203, "timestamp": "2018-06-21T22:45:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdeb76f8-9801-49d6-ac0a-b9a53d3856a9", "eventTime": "2018-06-21T22:45:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d70eabf6-dda3-423d-9ced-eb64641c9981", "record_id": "flaws_cloudtrail:0000204:d70eabf6-dda3-423d-9ced-eb64641c9981", "row_index": 204, "timestamp": "2018-06-21T22:45:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d70eabf6-dda3-423d-9ced-eb64641c9981", "eventTime": "2018-06-21T22:45:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "696710a49-00eb-4851-9e07-6c5a0bd31ea3", "record_id": "flaws_cloudtrail:0000205:696710a49-00eb-4851-9e07-6c5a0bd31ea3", "row_index": 205, "timestamp": "2018-06-21T22:45:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "696710a49-00eb-4851-9e07-6c5a0bd31ea3", "eventTime": "2018-06-21T22:45:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03fcb4e-9a3e-439d-ad13-852804eb374a2", "record_id": "flaws_cloudtrail:0000206:b03fcb4e-9a3e-439d-ad13-852804eb374a2", "row_index": 206, "timestamp": "2018-06-21T22:45:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03fcb4e-9a3e-439d-ad13-852804eb374a2", "eventTime": "2018-06-21T22:45:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "482e0934-ec72-4f11-8c4d-6352b456904f", "record_id": "flaws_cloudtrail:0000207:482e0934-ec72-4f11-8c4d-6352b456904f", "row_index": 207, "timestamp": "2018-06-21T22:45:01Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "482e0934-ec72-4f11-8c4d-6352b456904f", "eventTime": "2018-06-21T22:45:01Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5ebc763-3c13-4acd-b410-c7875f5fada2", "record_id": "flaws_cloudtrail:0000208:b5ebc763-3c13-4acd-b410-c7875f5fada2", "row_index": 208, "timestamp": "2018-06-21T22:45:02Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5ebc763-3c13-4acd-b410-c7875f5fada2", "eventTime": "2018-06-21T22:45:02Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8a49f9e-58a1-492f-94ad-4c63d50cfdc1", "record_id": "flaws_cloudtrail:0000209:d8a49f9e-58a1-492f-94ad-4c63d50cfdc1", "row_index": 209, "timestamp": "2018-06-21T22:45:02Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8a49f9e-58a1-492f-94ad-4c63d50cfdc1", "eventTime": "2018-06-21T22:45:02Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dac39e1d-c891-4f56-87d1-4d4fbb77351", "record_id": "flaws_cloudtrail:0000210:dac39e1d-c891-4f56-87d1-4d4fbb77351", "row_index": 210, "timestamp": "2018-06-21T22:45:02Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dac39e1d-c891-4f56-87d1-4d4fbb77351", "eventTime": "2018-06-21T22:45:02Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b4affe-67ef-4428-8ef5-cd22a2fd36f9", "record_id": "flaws_cloudtrail:0000211:c4b4affe-67ef-4428-8ef5-cd22a2fd36f9", "row_index": 211, "timestamp": "2018-06-21T22:45:02Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b4affe-67ef-4428-8ef5-cd22a2fd36f9", "eventTime": "2018-06-21T22:45:02Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ba7a4a20-efe2-4a30-b01d-9cae3788cd94", "record_id": "flaws_cloudtrail:0000212:ba7a4a20-efe2-4a30-b01d-9cae3788cd94", "row_index": 212, "timestamp": "2018-06-21T22:45:03Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ba7a4a20-efe2-4a30-b01d-9cae3788cd94", "eventTime": "2018-06-21T22:45:03Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ab7955a-103d-451c-8200-df7c46169a0", "record_id": "flaws_cloudtrail:0000213:6ab7955a-103d-451c-8200-df7c46169a0", "row_index": 213, "timestamp": "2018-06-21T22:45:04Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ab7955a-103d-451c-8200-df7c46169a0", "eventTime": "2018-06-21T22:45:04Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e92c0417-61e1-43f1-8f6e-dcc4bccbcf1c", "record_id": "flaws_cloudtrail:0000214:e92c0417-61e1-43f1-8f6e-dcc4bccbcf1c", "row_index": 214, "timestamp": "2018-06-21T22:45:04Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e92c0417-61e1-43f1-8f6e-dcc4bccbcf1c", "eventTime": "2018-06-21T22:45:04Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "017ff528-90ec-4f21-9fd0-966e32d044d2", "record_id": "flaws_cloudtrail:0000215:017ff528-90ec-4f21-9fd0-966e32d044d2", "row_index": 215, "timestamp": "2018-06-21T22:45:04Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "017ff528-90ec-4f21-9fd0-966e32d044d2", "eventTime": "2018-06-21T22:45:04Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42724a-d9db-458c-b5ae-fb2a4f614a82", "record_id": "flaws_cloudtrail:0000216:42724a-d9db-458c-b5ae-fb2a4f614a82", "row_index": 216, "timestamp": "2018-06-21T22:45:04Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42724a-d9db-458c-b5ae-fb2a4f614a82", "eventTime": "2018-06-21T22:45:04Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dff3c2ef-ef0d-4bfc-9597-9a092314dfda", "record_id": "flaws_cloudtrail:0000217:dff3c2ef-ef0d-4bfc-9597-9a092314dfda", "row_index": 217, "timestamp": "2018-06-21T22:45:04Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dff3c2ef-ef0d-4bfc-9597-9a092314dfda", "eventTime": "2018-06-21T22:45:04Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "920fc516-2c80-4833-bd6c-07097dfdbd8e", "record_id": "flaws_cloudtrail:0000218:920fc516-2c80-4833-bd6c-07097dfdbd8e", "row_index": 218, "timestamp": "2018-06-21T22:45:04Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "920fc516-2c80-4833-bd6c-07097dfdbd8e", "eventTime": "2018-06-21T22:45:04Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd6dd248-fa58-44c4-abdf-dddc45b236ce", "record_id": "flaws_cloudtrail:0000219:bd6dd248-fa58-44c4-abdf-dddc45b236ce", "row_index": 219, "timestamp": "2018-06-21T22:45:04Z", "event_type": "DescribeFileSystems", "event_source": "elasticfilesystem.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd6dd248-fa58-44c4-abdf-dddc45b236ce", "eventTime": "2018-06-21T22:45:04Z", "eventName": "DescribeFileSystems", "eventSource": "elasticfilesystem.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c53c756-68ec-43db-899a-d1c019c1eff7", "record_id": "flaws_cloudtrail:0000220:9c53c756-68ec-43db-899a-d1c019c1eff7", "row_index": 220, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c53c756-68ec-43db-899a-d1c019c1eff7", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e930f7a5-735e-4663-bc97-39d166067fb2b", "record_id": "flaws_cloudtrail:0000221:e930f7a5-735e-4663-bc97-39d166067fb2b", "row_index": 221, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeSSLPolicies", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 6763, "raw_record_depth": 6, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e930f7a5-735e-4663-bc97-39d166067fb2b", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeSSLPolicies", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"names": []}, "responseElements": {"sslPolicies": [{"name": "ELBSecurityPolicy-2016-08", "sslProtocols": ["TLSv1", "TLSv1.1", "TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 12}]}, {"name": "ELBSecurityPolicy-TLS-1-2-2017-01", "sslProtocols": ["TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES256-GCM-SHA384"}, {"priority": 6, "name": "ECDHE-RSA-AES256-GCM-SHA384"}, {"__truncated_len": 6}]}, {"name": "ELBSecurityPolicy-TLS-1-1-2017-01", "sslProtocols": ["TLSv1.1", "TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 12}]}, {"name": "ELBSecurityPolicy-TLS-1-2-Ext-2018-06", "sslProtocols": ["TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 12}]}, {"name": "ELBSecurityPolicy-FS-2018-06", "sslProtocols": ["TLSv1", "TLSv1.1", "TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 6}]}, {"name": "ELBSecurityPolicy-2015-05", "sslProtocols": ["TLSv1", "TLSv1.1", "TLSv1.2"], "ciphers": [{"priority": 1, "name": "ECDHE-ECDSA-AES128-GCM-SHA256"}, {"priority": 2, "name": "ECDHE-RSA-AES128-GCM-SHA256"}, {"priority": 3, "name": "ECDHE-ECDSA-AES128-SHA256"}, {"priority": 4, "name": "ECDHE-RSA-AES128-SHA256"}, {"priority": 5, "name": "ECDHE-ECDSA-AES128-SHA"}, {"priority": 6, "name": "ECDHE-RSA-AES128-SHA"}, {"__truncated_len": 12}]}, {"__truncated_len": 1}]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d672ae2e-fe6d-47a9-8386-05abb592f40b", "record_id": "flaws_cloudtrail:0000222:d672ae2e-fe6d-47a9-8386-05abb592f40b", "row_index": 222, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d672ae2e-fe6d-47a9-8386-05abb592f40b", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c8139d1-c61c-4b84-abb1-f548c558541ec", "record_id": "flaws_cloudtrail:0000223:7c8139d1-c61c-4b84-abb1-f548c558541ec", "row_index": 223, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c8139d1-c61c-4b84-abb1-f548c558541ec", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b33071-67b7-4bb2-a81a-1d26f66aa320", "record_id": "flaws_cloudtrail:0000224:2b33071-67b7-4bb2-a81a-1d26f66aa320", "row_index": 224, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b33071-67b7-4bb2-a81a-1d26f66aa320", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8185c613-0b11-4f01-bc07-6897cb7d8458", "record_id": "flaws_cloudtrail:0000225:8185c613-0b11-4f01-bc07-6897cb7d8458", "row_index": 225, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8185c613-0b11-4f01-bc07-6897cb7d8458", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4acd80a2-1339-41b6-aa21-be86f56c5b5a", "record_id": "flaws_cloudtrail:0000226:4acd80a2-1339-41b6-aa21-be86f56c5b5a", "row_index": 226, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4acd80a2-1339-41b6-aa21-be86f56c5b5a", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "93724e3-c311-4f10-afb9-40e7320c435e", "record_id": "flaws_cloudtrail:0000227:93724e3-c311-4f10-afb9-40e7320c435e", "row_index": 227, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "93724e3-c311-4f10-afb9-40e7320c435e", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4478b947-444e-44b0-8a04-ac28da654abb", "record_id": "flaws_cloudtrail:0000228:4478b947-444e-44b0-8a04-ac28da654abb", "row_index": 228, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4478b947-444e-44b0-8a04-ac28da654abb", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f43a3b7f-eeb6-4c3c-bca2-83fb7b20f8fc", "record_id": "flaws_cloudtrail:0000229:f43a3b7f-eeb6-4c3c-bca2-83fb7b20f8fc", "row_index": 229, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f43a3b7f-eeb6-4c3c-bca2-83fb7b20f8fc", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ce9b5e05-ce65-4e90-8a9c-ba563f9fa3da", "record_id": "flaws_cloudtrail:0000230:ce9b5e05-ce65-4e90-8a9c-ba563f9fa3da", "row_index": 230, "timestamp": "2018-06-21T22:45:07Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ce9b5e05-ce65-4e90-8a9c-ba563f9fa3da", "eventTime": "2018-06-21T22:45:07Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d79f6e45-03e3-490e-9dc5-07c8b592b828", "record_id": "flaws_cloudtrail:0000231:d79f6e45-03e3-490e-9dc5-07c8b592b828", "row_index": 231, "timestamp": "2018-06-21T22:45:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d79f6e45-03e3-490e-9dc5-07c8b592b828", "eventTime": "2018-06-21T22:45:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "766061a5-a7d6-4a76-9284-8a53ce9874dc", "record_id": "flaws_cloudtrail:0000232:766061a5-a7d6-4a76-9284-8a53ce9874dc", "row_index": 232, "timestamp": "2018-06-21T22:45:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "766061a5-a7d6-4a76-9284-8a53ce9874dc", "eventTime": "2018-06-21T22:45:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ccd538f4-47a2-42b7-b223-03dacf26e142", "record_id": "flaws_cloudtrail:0000233:ccd538f4-47a2-42b7-b223-03dacf26e142", "row_index": 233, "timestamp": "2018-06-21T22:45:09Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ccd538f4-47a2-42b7-b223-03dacf26e142", "eventTime": "2018-06-21T22:45:09Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e300ba3f-ae07-4d90-89b2-e183a2f368bf", "record_id": "flaws_cloudtrail:0000234:e300ba3f-ae07-4d90-89b2-e183a2f368bf", "row_index": 234, "timestamp": "2018-06-21T22:45:09Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e300ba3f-ae07-4d90-89b2-e183a2f368bf", "eventTime": "2018-06-21T22:45:09Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7da459e2-e174-4ae5-832e-c791a014a7e4", "record_id": "flaws_cloudtrail:0000235:7da459e2-e174-4ae5-832e-c791a014a7e4", "row_index": 235, "timestamp": "2018-06-21T22:45:09Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7da459e2-e174-4ae5-832e-c791a014a7e4", "eventTime": "2018-06-21T22:45:09Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ab5cc82-9173-42f4-8e87-0d2aeb730590", "record_id": "flaws_cloudtrail:0000236:1ab5cc82-9173-42f4-8e87-0d2aeb730590", "row_index": 236, "timestamp": "2018-06-21T22:45:10Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ab5cc82-9173-42f4-8e87-0d2aeb730590", "eventTime": "2018-06-21T22:45:10Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d5be875-fbe9-4dd7-88d7-5cb866d17ab7", "record_id": "flaws_cloudtrail:0000237:5d5be875-fbe9-4dd7-88d7-5cb866d17ab7", "row_index": 237, "timestamp": "2018-06-21T22:45:11Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d5be875-fbe9-4dd7-88d7-5cb866d17ab7", "eventTime": "2018-06-21T22:45:11Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "517b0269-c959-4106-8a12-18c139225d", "record_id": "flaws_cloudtrail:0000238:517b0269-c959-4106-8a12-18c139225d", "row_index": 238, "timestamp": "2018-06-21T22:45:11Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "517b0269-c959-4106-8a12-18c139225d", "eventTime": "2018-06-21T22:45:11Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7632bb0-0857-4e7c-ad03-3cc6a386a7ad", "record_id": "flaws_cloudtrail:0000239:a7632bb0-0857-4e7c-ad03-3cc6a386a7ad", "row_index": 239, "timestamp": "2018-06-21T22:45:11Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7632bb0-0857-4e7c-ad03-3cc6a386a7ad", "eventTime": "2018-06-21T22:45:11Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aac3ad81-96aa-4452-b143-16094ac2612", "record_id": "flaws_cloudtrail:0000240:aac3ad81-96aa-4452-b143-16094ac2612", "row_index": 240, "timestamp": "2018-06-21T22:45:11Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aac3ad81-96aa-4452-b143-16094ac2612", "eventTime": "2018-06-21T22:45:11Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b36bcc9a-5c3b-4177-aa5e-8bac3958de94", "record_id": "flaws_cloudtrail:0000241:b36bcc9a-5c3b-4177-aa5e-8bac3958de94", "row_index": 241, "timestamp": "2018-06-21T22:45:11Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b36bcc9a-5c3b-4177-aa5e-8bac3958de94", "eventTime": "2018-06-21T22:45:11Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b323db0b-5f94-451f-be3f-01aff3773208", "record_id": "flaws_cloudtrail:0000242:b323db0b-5f94-451f-be3f-01aff3773208", "row_index": 242, "timestamp": "2018-06-21T22:45:11Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b323db0b-5f94-451f-be3f-01aff3773208", "eventTime": "2018-06-21T22:45:11Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c022e895-a1a1-4914-b509-f85a92db0bfc", "record_id": "flaws_cloudtrail:0000243:c022e895-a1a1-4914-b509-f85a92db0bfc", "row_index": 243, "timestamp": "2018-06-21T22:45:11Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c022e895-a1a1-4914-b509-f85a92db0bfc", "eventTime": "2018-06-21T22:45:11Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72783-a494-475e-b980-ae79cec02960", "record_id": "flaws_cloudtrail:0000244:72783-a494-475e-b980-ae79cec02960", "row_index": 244, "timestamp": "2018-06-21T22:45:11Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72783-a494-475e-b980-ae79cec02960", "eventTime": "2018-06-21T22:45:11Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b772eaa4-f988-454f-a94c-e1c925faa48c", "record_id": "flaws_cloudtrail:0000245:b772eaa4-f988-454f-a94c-e1c925faa48c", "row_index": 245, "timestamp": "2018-06-21T22:45:12Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b772eaa4-f988-454f-a94c-e1c925faa48c", "eventTime": "2018-06-21T22:45:12Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acc5ac0b-da5d-4bed-832c-327f75895441", "record_id": "flaws_cloudtrail:0000246:acc5ac0b-da5d-4bed-832c-327f75895441", "row_index": 246, "timestamp": "2018-06-21T22:45:12Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acc5ac0b-da5d-4bed-832c-327f75895441", "eventTime": "2018-06-21T22:45:12Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bcb1756b-8eaf-4bbe-8fe1-caaad82da0cc", "record_id": "flaws_cloudtrail:0000247:bcb1756b-8eaf-4bbe-8fe1-caaad82da0cc", "row_index": 247, "timestamp": "2018-06-21T22:45:12Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bcb1756b-8eaf-4bbe-8fe1-caaad82da0cc", "eventTime": "2018-06-21T22:45:12Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2228ad53-56e6-464a-aaae-15651c9b2b78", "record_id": "flaws_cloudtrail:0000248:2228ad53-56e6-464a-aaae-15651c9b2b78", "row_index": 248, "timestamp": "2018-06-21T22:45:12Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2228ad53-56e6-464a-aaae-15651c9b2b78", "eventTime": "2018-06-21T22:45:12Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee29a55b-f9ad-49a7-8277-5af2f691d1fe", "record_id": "flaws_cloudtrail:0000249:ee29a55b-f9ad-49a7-8277-5af2f691d1fe", "row_index": 249, "timestamp": "2018-06-21T22:45:12Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee29a55b-f9ad-49a7-8277-5af2f691d1fe", "eventTime": "2018-06-21T22:45:12Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b586e18-d67f-4505-a9bc-74f1c7379437", "record_id": "flaws_cloudtrail:0000250:6b586e18-d67f-4505-a9bc-74f1c7379437", "row_index": 250, "timestamp": "2018-06-21T22:45:12Z", "event_type": "DescribeAlarms", "event_source": "monitoring.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b586e18-d67f-4505-a9bc-74f1c7379437", "eventTime": "2018-06-21T22:45:12Z", "eventName": "DescribeAlarms", "eventSource": "monitoring.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f08d0975-316b-4384-8935-a6f96366a7", "record_id": "flaws_cloudtrail:0000251:f08d0975-316b-4384-8935-a6f96366a7", "row_index": 251, "timestamp": "2018-06-21T22:45:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f08d0975-316b-4384-8935-a6f96366a7", "eventTime": "2018-06-21T22:45:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b94e38d-8b72-4681-bcf3-d7a974c5901c", "record_id": "flaws_cloudtrail:0000252:2b94e38d-8b72-4681-bcf3-d7a974c5901c", "row_index": 252, "timestamp": "2018-06-21T22:45:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b94e38d-8b72-4681-bcf3-d7a974c5901c", "eventTime": "2018-06-21T22:45:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b41c05c0-ab69-41b1-835a-99e3bd14479a", "record_id": "flaws_cloudtrail:0000253:b41c05c0-ab69-41b1-835a-99e3bd14479a", "row_index": 253, "timestamp": "2018-06-21T22:45:15Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b41c05c0-ab69-41b1-835a-99e3bd14479a", "eventTime": "2018-06-21T22:45:15Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8e9ebb38-5043-4c9d-b835-4bdbbf07268", "record_id": "flaws_cloudtrail:0000254:8e9ebb38-5043-4c9d-b835-4bdbbf07268", "row_index": 254, "timestamp": "2018-06-21T22:45:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8e9ebb38-5043-4c9d-b835-4bdbbf07268", "eventTime": "2018-06-21T22:45:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3700fba5-e872-4e4b-8aa8-9ed95431d8", "record_id": "flaws_cloudtrail:0000255:3700fba5-e872-4e4b-8aa8-9ed95431d8", "row_index": 255, "timestamp": "2018-06-21T22:45:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3700fba5-e872-4e4b-8aa8-9ed95431d8", "eventTime": "2018-06-21T22:45:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6ed1da2e-5aa1-485d-9cf9-445f3bf83d8c", "record_id": "flaws_cloudtrail:0000256:6ed1da2e-5aa1-485d-9cf9-445f3bf83d8c", "row_index": 256, "timestamp": "2018-06-21T22:45:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6ed1da2e-5aa1-485d-9cf9-445f3bf83d8c", "eventTime": "2018-06-21T22:45:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "489ff8d0-703b-4db2-852c-993b85035e62", "record_id": "flaws_cloudtrail:0000257:489ff8d0-703b-4db2-852c-993b85035e62", "row_index": 257, "timestamp": "2018-06-21T22:45:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "489ff8d0-703b-4db2-852c-993b85035e62", "eventTime": "2018-06-21T22:45:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c350ac5-b46e-4ce7-abfc-709bf76a4cfa", "record_id": "flaws_cloudtrail:0000258:4c350ac5-b46e-4ce7-abfc-709bf76a4cfa", "row_index": 258, "timestamp": "2018-06-21T22:45:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c350ac5-b46e-4ce7-abfc-709bf76a4cfa", "eventTime": "2018-06-21T22:45:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39b019335-ee40-481e-9dd0-96cdf0f564d4", "record_id": "flaws_cloudtrail:0000259:39b019335-ee40-481e-9dd0-96cdf0f564d4", "row_index": 259, "timestamp": "2018-06-21T22:45:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39b019335-ee40-481e-9dd0-96cdf0f564d4", "eventTime": "2018-06-21T22:45:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20174d-846c-4146-8cc7-e2c89305", "record_id": "flaws_cloudtrail:0000260:20174d-846c-4146-8cc7-e2c89305", "row_index": 260, "timestamp": "2018-06-21T22:45:16Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20174d-846c-4146-8cc7-e2c89305", "eventTime": "2018-06-21T22:45:16Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1628c22-803b-4edc-ab03-60c7e630e3f3", "record_id": "flaws_cloudtrail:0000261:b1628c22-803b-4edc-ab03-60c7e630e3f3", "row_index": 261, "timestamp": "2018-06-21T22:45:17Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1628c22-803b-4edc-ab03-60c7e630e3f3", "eventTime": "2018-06-21T22:45:17Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "69cf087b-bd06-495a-afe0-fe5baec704a6", "record_id": "flaws_cloudtrail:0000262:69cf087b-bd06-495a-afe0-fe5baec704a6", "row_index": 262, "timestamp": "2018-06-21T22:45:17Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "69cf087b-bd06-495a-afe0-fe5baec704a6", "eventTime": "2018-06-21T22:45:17Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff7e0ae9-038b-4f97-b68b-1e645d66ee03", "record_id": "flaws_cloudtrail:0000263:ff7e0ae9-038b-4f97-b68b-1e645d66ee03", "row_index": 263, "timestamp": "2018-06-21T22:45:17Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff7e0ae9-038b-4f97-b68b-1e645d66ee03", "eventTime": "2018-06-21T22:45:17Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "207d22b2-666d-49e4-97ea-68dec86b1df5", "record_id": "flaws_cloudtrail:0000264:207d22b2-666d-49e4-97ea-68dec86b1df5", "row_index": 264, "timestamp": "2018-06-21T22:45:17Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "207d22b2-666d-49e4-97ea-68dec86b1df5", "eventTime": "2018-06-21T22:45:17Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd96743-b590-424d-8460-97a90a28787", "record_id": "flaws_cloudtrail:0000265:fd96743-b590-424d-8460-97a90a28787", "row_index": 265, "timestamp": "2018-06-21T22:45:17Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd96743-b590-424d-8460-97a90a28787", "eventTime": "2018-06-21T22:45:17Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8655dea9-358d-4fcf-9767-0d196dd15fcf", "record_id": "flaws_cloudtrail:0000266:8655dea9-358d-4fcf-9767-0d196dd15fcf", "row_index": 266, "timestamp": "2018-06-21T22:45:20Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8655dea9-358d-4fcf-9767-0d196dd15fcf", "eventTime": "2018-06-21T22:45:20Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c183c0d1-5de9-4d8a-981f-ee7d6abeb274", "record_id": "flaws_cloudtrail:0000267:c183c0d1-5de9-4d8a-981f-ee7d6abeb274", "row_index": 267, "timestamp": "2018-06-21T22:45:20Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c183c0d1-5de9-4d8a-981f-ee7d6abeb274", "eventTime": "2018-06-21T22:45:20Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3172cbac-9cb0-4aee-b097-aa8bfddffe41", "record_id": "flaws_cloudtrail:0000268:3172cbac-9cb0-4aee-b097-aa8bfddffe41", "row_index": 268, "timestamp": "2018-06-21T22:45:20Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3172cbac-9cb0-4aee-b097-aa8bfddffe41", "eventTime": "2018-06-21T22:45:20Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5a6a4d2-69fa-4550-8755-2f88c0b5920c", "record_id": "flaws_cloudtrail:0000269:b5a6a4d2-69fa-4550-8755-2f88c0b5920c", "row_index": 269, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5a6a4d2-69fa-4550-8755-2f88c0b5920c", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0da40f0c-ff30-4740-954b-b7a19a668504", "record_id": "flaws_cloudtrail:0000270:0da40f0c-ff30-4740-954b-b7a19a668504", "row_index": 270, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0da40f0c-ff30-4740-954b-b7a19a668504", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "557eeff7-a190-459d-9790-3187bfeef43c", "record_id": "flaws_cloudtrail:0000271:557eeff7-a190-459d-9790-3187bfeef43c", "row_index": 271, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "557eeff7-a190-459d-9790-3187bfeef43c", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2fe92385-5b39-44eb-866c-0ebe135a76c3", "record_id": "flaws_cloudtrail:0000272:2fe92385-5b39-44eb-866c-0ebe135a76c3", "row_index": 272, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2fe92385-5b39-44eb-866c-0ebe135a76c3", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8978e280-6095-45a0-b12f-a7ad887af622", "record_id": "flaws_cloudtrail:0000273:8978e280-6095-45a0-b12f-a7ad887af622", "row_index": 273, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8978e280-6095-45a0-b12f-a7ad887af622", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d3fd011-d954-4f85-93bf-af5e3d5aa8e0", "record_id": "flaws_cloudtrail:0000274:6d3fd011-d954-4f85-93bf-af5e3d5aa8e0", "row_index": 274, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d3fd011-d954-4f85-93bf-af5e3d5aa8e0", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec9ec26d-7857-45f8-a4ac-4cb2bca2d1e6", "record_id": "flaws_cloudtrail:0000275:ec9ec26d-7857-45f8-a4ac-4cb2bca2d1e6", "row_index": 275, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec9ec26d-7857-45f8-a4ac-4cb2bca2d1e6", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5d708b75-2d6d-42dc-8a17-1e92dd82201", "record_id": "flaws_cloudtrail:0000276:5d708b75-2d6d-42dc-8a17-1e92dd82201", "row_index": 276, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5d708b75-2d6d-42dc-8a17-1e92dd82201", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b28a1288-c59a-485f-80e7-668429ec43a5c", "record_id": "flaws_cloudtrail:0000277:b28a1288-c59a-485f-80e7-668429ec43a5c", "row_index": 277, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b28a1288-c59a-485f-80e7-668429ec43a5c", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b6776d2-da3b-4189-b680-252efe419c49", "record_id": "flaws_cloudtrail:0000278:2b6776d2-da3b-4189-b680-252efe419c49", "row_index": 278, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b6776d2-da3b-4189-b680-252efe419c49", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9801beae-be6b-4c7b-940d-b10cb7237e46", "record_id": "flaws_cloudtrail:0000279:9801beae-be6b-4c7b-940d-b10cb7237e46", "row_index": 279, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9801beae-be6b-4c7b-940d-b10cb7237e46", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bee57bc4-1938-40b9-8597-956597cc0258", "record_id": "flaws_cloudtrail:0000280:bee57bc4-1938-40b9-8597-956597cc0258", "row_index": 280, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bee57bc4-1938-40b9-8597-956597cc0258", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdccadbc-11ae-4ea8-92b0-5bb72f53e9ff", "record_id": "flaws_cloudtrail:0000281:fdccadbc-11ae-4ea8-92b0-5bb72f53e9ff", "row_index": 281, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdccadbc-11ae-4ea8-92b0-5bb72f53e9ff", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "872097b12-2af9-4f6f-9da4-15d046aaaa72", "record_id": "flaws_cloudtrail:0000282:872097b12-2af9-4f6f-9da4-15d046aaaa72", "row_index": 282, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "872097b12-2af9-4f6f-9da4-15d046aaaa72", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5c2468c-bd29-4a30-ab92-d514388b90fcb", "record_id": "flaws_cloudtrail:0000283:a5c2468c-bd29-4a30-ab92-d514388b90fcb", "row_index": 283, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5c2468c-bd29-4a30-ab92-d514388b90fcb", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "393a6b5d-0761-4eee-b8dc-f40cc4349eae", "record_id": "flaws_cloudtrail:0000284:393a6b5d-0761-4eee-b8dc-f40cc4349eae", "row_index": 284, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "393a6b5d-0761-4eee-b8dc-f40cc4349eae", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "178ab260-3a3b-4ee6-b26f-bedef18c7a1b", "record_id": "flaws_cloudtrail:0000285:178ab260-3a3b-4ee6-b26f-bedef18c7a1b", "row_index": 285, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "178ab260-3a3b-4ee6-b26f-bedef18c7a1b", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91df1723-bb4c-4aa6-9002-6c41624ce73", "record_id": "flaws_cloudtrail:0000286:91df1723-bb4c-4aa6-9002-6c41624ce73", "row_index": 286, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91df1723-bb4c-4aa6-9002-6c41624ce73", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "41aa48b0-8297-48ab-a549-b696dfcb6f86", "record_id": "flaws_cloudtrail:0000287:41aa48b0-8297-48ab-a549-b696dfcb6f86", "row_index": 287, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "41aa48b0-8297-48ab-a549-b696dfcb6f86", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ddf20ca-88fb-4f02-88a5-fdd7202b1f43", "record_id": "flaws_cloudtrail:0000288:5ddf20ca-88fb-4f02-88a5-fdd7202b1f43", "row_index": 288, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ddf20ca-88fb-4f02-88a5-fdd7202b1f43", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e1c8d85-b2c2-4bdd-93ed-3c90aaf9a1ca", "record_id": "flaws_cloudtrail:0000289:2e1c8d85-b2c2-4bdd-93ed-3c90aaf9a1ca", "row_index": 289, "timestamp": "2018-06-21T22:45:21Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e1c8d85-b2c2-4bdd-93ed-3c90aaf9a1ca", "eventTime": "2018-06-21T22:45:21Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ff37cf-40fc-4a70-a42b-91102986f586", "record_id": "flaws_cloudtrail:0000290:77ff37cf-40fc-4a70-a42b-91102986f586", "row_index": 290, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ff37cf-40fc-4a70-a42b-91102986f586", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cde743f-f4ab-4577-8a1b-f78b25526d93", "record_id": "flaws_cloudtrail:0000291:5cde743f-f4ab-4577-8a1b-f78b25526d93", "row_index": 291, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cde743f-f4ab-4577-8a1b-f78b25526d93", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f6ffc83-7afb-4781-8f23-e96410d5570", "record_id": "flaws_cloudtrail:0000292:2f6ffc83-7afb-4781-8f23-e96410d5570", "row_index": 292, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f6ffc83-7afb-4781-8f23-e96410d5570", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544e539f-6e34-4a16-bbee-d821271fa971", "record_id": "flaws_cloudtrail:0000293:544e539f-6e34-4a16-bbee-d821271fa971", "row_index": 293, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544e539f-6e34-4a16-bbee-d821271fa971", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "66772ec3-0f9a-4015-8122-10e2547e0cf9", "record_id": "flaws_cloudtrail:0000294:66772ec3-0f9a-4015-8122-10e2547e0cf9", "row_index": 294, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "66772ec3-0f9a-4015-8122-10e2547e0cf9", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99b4766c-346f-4df8-8823-36cf1f94f349", "record_id": "flaws_cloudtrail:0000295:99b4766c-346f-4df8-8823-36cf1f94f349", "row_index": 295, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99b4766c-346f-4df8-8823-36cf1f94f349", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "227823c43-4a04-49ba-bfad-2df1b198f13c", "record_id": "flaws_cloudtrail:0000296:227823c43-4a04-49ba-bfad-2df1b198f13c", "row_index": 296, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "227823c43-4a04-49ba-bfad-2df1b198f13c", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "05e42a77-859f-4a46-b44e-74b620006cf1", "record_id": "flaws_cloudtrail:0000297:05e42a77-859f-4a46-b44e-74b620006cf1", "row_index": 297, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "05e42a77-859f-4a46-b44e-74b620006cf1", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5a6d242-43d2-4b7e-b93b-111d397617e3", "record_id": "flaws_cloudtrail:0000298:f5a6d242-43d2-4b7e-b93b-111d397617e3", "row_index": 298, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5a6d242-43d2-4b7e-b93b-111d397617e3", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "814c035c-8943-4702-9933-36ace90886", "record_id": "flaws_cloudtrail:0000299:814c035c-8943-4702-9933-36ace90886", "row_index": 299, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "814c035c-8943-4702-9933-36ace90886", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5682b14-ead3-41a6-bb9d-65935dc6abe5", "record_id": "flaws_cloudtrail:0000300:e5682b14-ead3-41a6-bb9d-65935dc6abe5", "row_index": 300, "timestamp": "2018-06-21T22:45:22Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5682b14-ead3-41a6-bb9d-65935dc6abe5", "eventTime": "2018-06-21T22:45:22Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2bbfa4bd-3da1-4737-b106-2e390a1ffd30", "record_id": "flaws_cloudtrail:0000301:2bbfa4bd-3da1-4737-b106-2e390a1ffd30", "row_index": 301, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2bbfa4bd-3da1-4737-b106-2e390a1ffd30", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ab257cac-5269-44ab-8461-7af4e3206ff2", "record_id": "flaws_cloudtrail:0000302:ab257cac-5269-44ab-8461-7af4e3206ff2", "row_index": 302, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ab257cac-5269-44ab-8461-7af4e3206ff2", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a95f8fe5-d2bf-4d20-88af-d7cd92f38f73", "record_id": "flaws_cloudtrail:0000303:a95f8fe5-d2bf-4d20-88af-d7cd92f38f73", "row_index": 303, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a95f8fe5-d2bf-4d20-88af-d7cd92f38f73", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19f91986-2f6d-43cc-9c31-1a5974e2e98d", "record_id": "flaws_cloudtrail:0000304:19f91986-2f6d-43cc-9c31-1a5974e2e98d", "row_index": 304, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19f91986-2f6d-43cc-9c31-1a5974e2e98d", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a160de9-0503-411b-a167-281b4c3133af", "record_id": "flaws_cloudtrail:0000305:0a160de9-0503-411b-a167-281b4c3133af", "row_index": 305, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a160de9-0503-411b-a167-281b4c3133af", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2c3bff2-6bf9-48a0-8793-86692bcc8a8", "record_id": "flaws_cloudtrail:0000306:d2c3bff2-6bf9-48a0-8793-86692bcc8a8", "row_index": 306, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2c3bff2-6bf9-48a0-8793-86692bcc8a8", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b290106dd-56f2-439a-9e32-ef00821", "record_id": "flaws_cloudtrail:0000307:b290106dd-56f2-439a-9e32-ef00821", "row_index": 307, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b290106dd-56f2-439a-9e32-ef00821", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a58e9050-0ac6-4c3e-8542-0ca7a3fd15a9", "record_id": "flaws_cloudtrail:0000308:a58e9050-0ac6-4c3e-8542-0ca7a3fd15a9", "row_index": 308, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a58e9050-0ac6-4c3e-8542-0ca7a3fd15a9", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdad72f1-e98c-4321-b3b0-c242c2f32f09", "record_id": "flaws_cloudtrail:0000309:bdad72f1-e98c-4321-b3b0-c242c2f32f09", "row_index": 309, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusterParameterGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdad72f1-e98c-4321-b3b0-c242c2f32f09", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusterParameterGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"parameterGroups": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bcd0ec0-33ae-4fdd-8a24-f027437b1", "record_id": "flaws_cloudtrail:0000310:4bcd0ec0-33ae-4fdd-8a24-f027437b1", "row_index": 310, "timestamp": "2018-06-21T22:45:23Z", "event_type": "DescribeClusterSecurityGroups", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bcd0ec0-33ae-4fdd-8a24-f027437b1", "eventTime": "2018-06-21T22:45:23Z", "eventName": "DescribeClusterSecurityGroups", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bc001997-d41d-4e01-9b85-aff60e50cf3f", "record_id": "flaws_cloudtrail:0000311:1bc001997-d41d-4e01-9b85-aff60e50cf3f", "row_index": 311, "timestamp": "2018-06-21T22:45:26Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bc001997-d41d-4e01-9b85-aff60e50cf3f", "eventTime": "2018-06-21T22:45:26Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07241-7642-424e-8833-badb799654", "record_id": "flaws_cloudtrail:0000312:07241-7642-424e-8833-badb799654", "row_index": 312, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07241-7642-424e-8833-badb799654", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9c8d70a2-73ef-41b6-a8b0-5b020834a951", "record_id": "flaws_cloudtrail:0000313:9c8d70a2-73ef-41b6-a8b0-5b020834a951", "row_index": 313, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9c8d70a2-73ef-41b6-a8b0-5b020834a951", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d5a3defc-e33b-4148-b5df-2f4b50d37f52", "record_id": "flaws_cloudtrail:0000314:d5a3defc-e33b-4148-b5df-2f4b50d37f52", "row_index": 314, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d5a3defc-e33b-4148-b5df-2f4b50d37f52", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "39c45b89-b05a-4585-821c-9314f00eabeb", "record_id": "flaws_cloudtrail:0000315:39c45b89-b05a-4585-821c-9314f00eabeb", "row_index": 315, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "39c45b89-b05a-4585-821c-9314f00eabeb", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1178c28-7872-4b71-9613-dc004012fca48", "record_id": "flaws_cloudtrail:0000316:c1178c28-7872-4b71-9613-dc004012fca48", "row_index": 316, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1178c28-7872-4b71-9613-dc004012fca48", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "544dd514-45dd-4348-a7bf-9c096d578115", "record_id": "flaws_cloudtrail:0000317:544dd514-45dd-4348-a7bf-9c096d578115", "row_index": 317, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "544dd514-45dd-4348-a7bf-9c096d578115", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "084c18a3-8324-4feb-bbe0-f95c66a99b81", "record_id": "flaws_cloudtrail:0000318:084c18a3-8324-4feb-bbe0-f95c66a99b81", "row_index": 318, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "084c18a3-8324-4feb-bbe0-f95c66a99b81", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "26d6369f-4b5f-44d2-a4f1-a509fbc22c1d", "record_id": "flaws_cloudtrail:0000319:26d6369f-4b5f-44d2-a4f1-a509fbc22c1d", "row_index": 319, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "26d6369f-4b5f-44d2-a4f1-a509fbc22c1d", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32fac43d-02db-4556-baad-4292dbda9b2e", "record_id": "flaws_cloudtrail:0000320:32fac43d-02db-4556-baad-4292dbda9b2e", "row_index": 320, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32fac43d-02db-4556-baad-4292dbda9b2e", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "72b1ba68-f4f8-4d37-b18f-08dbe9930fd0", "record_id": "flaws_cloudtrail:0000321:72b1ba68-f4f8-4d37-b18f-08dbe9930fd0", "row_index": 321, "timestamp": "2018-06-21T22:45:27Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "72b1ba68-f4f8-4d37-b18f-08dbe9930fd0", "eventTime": "2018-06-21T22:45:27Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be897380-93ca-4745-b230-598370beef5dc", "record_id": "flaws_cloudtrail:0000322:be897380-93ca-4745-b230-598370beef5dc", "row_index": 322, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be897380-93ca-4745-b230-598370beef5dc", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f96adba-b6ee-4a65-9705-09ab5d4e9511", "record_id": "flaws_cloudtrail:0000323:5f96adba-b6ee-4a65-9705-09ab5d4e9511", "row_index": 323, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f96adba-b6ee-4a65-9705-09ab5d4e9511", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec358580d-c78b-4932-a885-1af5d84d39e5", "record_id": "flaws_cloudtrail:0000324:ec358580d-c78b-4932-a885-1af5d84d39e5", "row_index": 324, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec358580d-c78b-4932-a885-1af5d84d39e5", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82b7f8b9-ea3f-4851-a538-2e1e5d41040", "record_id": "flaws_cloudtrail:0000325:82b7f8b9-ea3f-4851-a538-2e1e5d41040", "row_index": 325, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 814, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82b7f8b9-ea3f-4851-a538-2e1e5d41040", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c9b0acc-6509-4645-987c-1e7d26e1ae9e", "record_id": "flaws_cloudtrail:0000326:3c9b0acc-6509-4645-987c-1e7d26e1ae9e", "row_index": 326, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c9b0acc-6509-4645-987c-1e7d26e1ae9e", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf37177-55fd-4481-bae7-15d7ec55a6fd", "record_id": "flaws_cloudtrail:0000327:cf37177-55fd-4481-bae7-15d7ec55a6fd", "row_index": 327, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 826, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf37177-55fd-4481-bae7-15d7ec55a6fd", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "errorCode": "NoSuchWebsiteConfiguration", "errorMessage": "The specified bucket does not have a website configuration", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "acc4a6e0-b66c-48ca-8fa6-31f7b3d2a751", "record_id": "flaws_cloudtrail:0000328:acc4a6e0-b66c-48ca-8fa6-31f7b3d2a751", "row_index": 328, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "acc4a6e0-b66c-48ca-8fa6-31f7b3d2a751", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1a9444b-1a80-4551-aa6e-266942d5ad4c", "record_id": "flaws_cloudtrail:0000329:f1a9444b-1a80-4551-aa6e-266942d5ad4c", "row_index": 329, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1a9444b-1a80-4551-aa6e-266942d5ad4c", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "381cec8e-39aa-4f11-ac05-c198e435b7d9", "record_id": "flaws_cloudtrail:0000330:381cec8e-39aa-4f11-ac05-c198e435b7d9", "row_index": 330, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "381cec8e-39aa-4f11-ac05-c198e435b7d9", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdb6e6d1-7083-4061-b421-7c68cfb5e608", "record_id": "flaws_cloudtrail:0000331:bdb6e6d1-7083-4061-b421-7c68cfb5e608", "row_index": 331, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdb6e6d1-7083-4061-b421-7c68cfb5e608", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f725113dc-7e41-4695-accd-b0fd10874fa4", "record_id": "flaws_cloudtrail:0000332:f725113dc-7e41-4695-accd-b0fd10874fa4", "row_index": 332, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f725113dc-7e41-4695-accd-b0fd10874fa4", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54011e70-e319-4d4f-9fbf-0150b5d6dade", "record_id": "flaws_cloudtrail:0000333:54011e70-e319-4d4f-9fbf-0150b5d6dade", "row_index": 333, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54011e70-e319-4d4f-9fbf-0150b5d6dade", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9cdba09b-bfba-487e-b507-6537f93079e", "record_id": "flaws_cloudtrail:0000334:9cdba09b-bfba-487e-b507-6537f93079e", "row_index": 334, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9cdba09b-bfba-487e-b507-6537f93079e", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925000fa-843c-4955-9bf8-1e169ce9684f", "record_id": "flaws_cloudtrail:0000335:925000fa-843c-4955-9bf8-1e169ce9684f", "row_index": 335, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925000fa-843c-4955-9bf8-1e169ce9684f", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01a91e4b-c604-48eb-9b11-47e39ee4857b", "record_id": "flaws_cloudtrail:0000336:01a91e4b-c604-48eb-9b11-47e39ee4857b", "row_index": 336, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01a91e4b-c604-48eb-9b11-47e39ee4857b", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55fac7cd-6b69-4835-8f63-0cc039b535759", "record_id": "flaws_cloudtrail:0000337:55fac7cd-6b69-4835-8f63-0cc039b535759", "row_index": 337, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55fac7cd-6b69-4835-8f63-0cc039b535759", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c54e6af-1d6f-4336-b0a3-645b775820", "record_id": "flaws_cloudtrail:0000338:3c54e6af-1d6f-4336-b0a3-645b775820", "row_index": 338, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c54e6af-1d6f-4336-b0a3-645b775820", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dbd79c2-efb2-4f90-924f-59bbcc9f378a", "record_id": "flaws_cloudtrail:0000339:9dbd79c2-efb2-4f90-924f-59bbcc9f378a", "row_index": 339, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dbd79c2-efb2-4f90-924f-59bbcc9f378a", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e49e48d5-53dc-4603-8868-9594d798de7c", "record_id": "flaws_cloudtrail:0000340:e49e48d5-53dc-4603-8868-9594d798de7c", "row_index": 340, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e49e48d5-53dc-4603-8868-9594d798de7c", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9304bbb5-cf90-4f47-afcb-4f44faceafdc", "record_id": "flaws_cloudtrail:0000341:9304bbb5-cf90-4f47-afcb-4f44faceafdc", "row_index": 341, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9304bbb5-cf90-4f47-afcb-4f44faceafdc", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "039ba26e-d98a-4a5c-8d60-0f093728c8260", "record_id": "flaws_cloudtrail:0000342:039ba26e-d98a-4a5c-8d60-0f093728c8260", "row_index": 342, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "039ba26e-d98a-4a5c-8d60-0f093728c8260", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af86b825-2e49-4f4b-857f-b4f841605399", "record_id": "flaws_cloudtrail:0000343:af86b825-2e49-4f4b-857f-b4f841605399", "row_index": 343, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af86b825-2e49-4f4b-857f-b4f841605399", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0c95156-e4ab-4ecf-a7b0-f6fca9340fa9", "record_id": "flaws_cloudtrail:0000344:b0c95156-e4ab-4ecf-a7b0-f6fca9340fa9", "row_index": 344, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0c95156-e4ab-4ecf-a7b0-f6fca9340fa9", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b863d07-ba3a-4f6f-9254-00f00f4f5ddf", "record_id": "flaws_cloudtrail:0000345:3b863d07-ba3a-4f6f-9254-00f00f4f5ddf", "row_index": 345, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b863d07-ba3a-4f6f-9254-00f00f4f5ddf", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c098a2de-c93a-4e1e-9598-4d08f34f00f3", "record_id": "flaws_cloudtrail:0000346:c098a2de-c93a-4e1e-9598-4d08f34f00f3", "row_index": 346, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c098a2de-c93a-4e1e-9598-4d08f34f00f3", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "430fdc25-8972-4fc4-be88-8973c83a5c3a", "record_id": "flaws_cloudtrail:0000347:430fdc25-8972-4fc4-be88-8973c83a5c3a", "row_index": 347, "timestamp": "2018-06-21T22:45:28Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "430fdc25-8972-4fc4-be88-8973c83a5c3a", "eventTime": "2018-06-21T22:45:28Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23361d-74eb-47ec-bb9a-279fdc76cea3", "record_id": "flaws_cloudtrail:0000348:23361d-74eb-47ec-bb9a-279fdc76cea3", "row_index": 348, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23361d-74eb-47ec-bb9a-279fdc76cea3", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7356a98a-1174-4ce3-b6a2-fa1d1fcfa5c5", "record_id": "flaws_cloudtrail:0000349:7356a98a-1174-4ce3-b6a2-fa1d1fcfa5c5", "row_index": 349, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7356a98a-1174-4ce3-b6a2-fa1d1fcfa5c5", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b8e6557-6b0d-4489-b6e6-931752e2eb0e", "record_id": "flaws_cloudtrail:0000350:8b8e6557-6b0d-4489-b6e6-931752e2eb0e", "row_index": 350, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b8e6557-6b0d-4489-b6e6-931752e2eb0e", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21f443106-455e-4927-a485-3056a558d070", "record_id": "flaws_cloudtrail:0000351:21f443106-455e-4927-a485-3056a558d070", "row_index": 351, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21f443106-455e-4927-a485-3056a558d070", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5c7ff4c-3886-4f97-9204-1791b306ae16", "record_id": "flaws_cloudtrail:0000352:b5c7ff4c-3886-4f97-9204-1791b306ae16", "row_index": 352, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5c7ff4c-3886-4f97-9204-1791b306ae16", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c27d1ac-fed7-4bb7-a439-0f9fb5764e16", "record_id": "flaws_cloudtrail:0000353:6c27d1ac-fed7-4bb7-a439-0f9fb5764e16", "row_index": 353, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c27d1ac-fed7-4bb7-a439-0f9fb5764e16", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76596cd5-f9aa-4d23-ab5f-a05932741b46", "record_id": "flaws_cloudtrail:0000354:76596cd5-f9aa-4d23-ab5f-a05932741b46", "row_index": 354, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76596cd5-f9aa-4d23-ab5f-a05932741b46", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0bf1e48-410a-430b-9f95-e21f4b0e33ba", "record_id": "flaws_cloudtrail:0000355:e0bf1e48-410a-430b-9f95-e21f4b0e33ba", "row_index": 355, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0bf1e48-410a-430b-9f95-e21f4b0e33ba", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4cb11f7-a00f-4d72-93a1-4ca2e7f027a8", "record_id": "flaws_cloudtrail:0000356:f4cb11f7-a00f-4d72-93a1-4ca2e7f027a8", "row_index": 356, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4cb11f7-a00f-4d72-93a1-4ca2e7f027a8", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78fa44fb-cc10-4886-8669-df05db20611", "record_id": "flaws_cloudtrail:0000357:78fa44fb-cc10-4886-8669-df05db20611", "row_index": 357, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78fa44fb-cc10-4886-8669-df05db20611", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9149b56-6e5c-4d4c-aa2f-e369140d55c3", "record_id": "flaws_cloudtrail:0000358:a9149b56-6e5c-4d4c-aa2f-e369140d55c3", "row_index": 358, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 795, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9149b56-6e5c-4d4c-aa2f-e369140d55c3", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "15dc49d5-9688-4942-8a6d-248341e10615", "record_id": "flaws_cloudtrail:0000359:15dc49d5-9688-4942-8a6d-248341e10615", "row_index": 359, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "15dc49d5-9688-4942-8a6d-248341e10615", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea4c7f58-e075-470e-b6f1-9fa9c801581", "record_id": "flaws_cloudtrail:0000360:ea4c7f58-e075-470e-b6f1-9fa9c801581", "row_index": 360, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea4c7f58-e075-470e-b6f1-9fa9c801581", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61d850ca-6c90-4a8b-81af-51ce83332977", "record_id": "flaws_cloudtrail:0000361:61d850ca-6c90-4a8b-81af-51ce83332977", "row_index": 361, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61d850ca-6c90-4a8b-81af-51ce83332977", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "442e3464-2ed7-4b0a-bd46-877713ae6e5e", "record_id": "flaws_cloudtrail:0000362:442e3464-2ed7-4b0a-bd46-877713ae6e5e", "row_index": 362, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "442e3464-2ed7-4b0a-bd46-877713ae6e5e", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7c4a6cf-9e7e-4c44-b091-3307afba4315", "record_id": "flaws_cloudtrail:0000363:a7c4a6cf-9e7e-4c44-b091-3307afba4315", "row_index": 363, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7c4a6cf-9e7e-4c44-b091-3307afba4315", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a612752b9-1a0f-4588-8b4d-61f0f56ff91b", "record_id": "flaws_cloudtrail:0000364:a612752b9-1a0f-4588-8b4d-61f0f56ff91b", "row_index": 364, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a612752b9-1a0f-4588-8b4d-61f0f56ff91b", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4708a5f7-1b21-48a1-b7e5-fdddb8d871c4", "record_id": "flaws_cloudtrail:0000365:4708a5f7-1b21-48a1-b7e5-fdddb8d871c4", "row_index": 365, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4708a5f7-1b21-48a1-b7e5-fdddb8d871c4", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfc61859-9279-4950-af38-b9d43288c03b", "record_id": "flaws_cloudtrail:0000366:cfc61859-9279-4950-af38-b9d43288c03b", "row_index": 366, "timestamp": "2018-06-21T22:45:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfc61859-9279-4950-af38-b9d43288c03b", "eventTime": "2018-06-21T22:45:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60195ea0-c311-4007-809c-1ba61d6f3b03", "record_id": "flaws_cloudtrail:0000367:60195ea0-c311-4007-809c-1ba61d6f3b03", "row_index": 367, "timestamp": "2018-06-21T22:45:31Z", "event_type": "GetBucketVersioning", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60195ea0-c311-4007-809c-1ba61d6f3b03", "eventTime": "2018-06-21T22:45:31Z", "eventName": "GetBucketVersioning", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "versioning": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8087ab8b-1310-4ab5-9752-fdad81e921661", "record_id": "flaws_cloudtrail:0000368:8087ab8b-1310-4ab5-9752-fdad81e921661", "row_index": 368, "timestamp": "2018-06-21T22:45:31Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8087ab8b-1310-4ab5-9752-fdad81e921661", "eventTime": "2018-06-21T22:45:31Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "955f4733-c540-42ec-b360-a406be40e729", "record_id": "flaws_cloudtrail:0000369:955f4733-c540-42ec-b360-a406be40e729", "row_index": 369, "timestamp": "2018-06-21T22:45:31Z", "event_type": "GetBucketWebsite", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "955f4733-c540-42ec-b360-a406be40e729", "eventTime": "2018-06-21T22:45:31Z", "eventName": "GetBucketWebsite", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "website": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bfd0b8d-77f6-4f03-b166-35c9f8a3e719", "record_id": "flaws_cloudtrail:0000370:8bfd0b8d-77f6-4f03-b166-35c9f8a3e719", "row_index": 370, "timestamp": "2018-06-21T22:45:32Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bfd0b8d-77f6-4f03-b166-35c9f8a3e719", "eventTime": "2018-06-21T22:45:32Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a57a8384-6bd3-42be-a145-474eef729c6c", "record_id": "flaws_cloudtrail:0000371:a57a8384-6bd3-42be-a145-474eef729c6c", "row_index": 371, "timestamp": "2018-06-21T22:45:32Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a57a8384-6bd3-42be-a145-474eef729c6c", "eventTime": "2018-06-21T22:45:32Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "[Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dd4d6d7-d85f-4e3a-b791-28611a71e0c1", "record_id": "flaws_cloudtrail:0000372:3dd4d6d7-d85f-4e3a-b791-28611a71e0c1", "row_index": 372, "timestamp": "2018-06-21T22:45:35Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dd4d6d7-d85f-4e3a-b791-28611a71e0c1", "eventTime": "2018-06-21T22:45:35Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3acbac2-d407-4798-b905-448f914f82a6", "record_id": "flaws_cloudtrail:0000373:c3acbac2-d407-4798-b905-448f914f82a6", "row_index": 373, "timestamp": "2018-06-21T22:45:35Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3acbac2-d407-4798-b905-448f914f82a6", "eventTime": "2018-06-21T22:45:35Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "45aa21c5-dee1-402f-8f89-c72750ffd0", "record_id": "flaws_cloudtrail:0000374:45aa21c5-dee1-402f-8f89-c72750ffd0", "row_index": 374, "timestamp": "2018-06-21T22:45:35Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "45aa21c5-dee1-402f-8f89-c72750ffd0", "eventTime": "2018-06-21T22:45:35Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da3faace-7226-4578-b684-d686a52ee845", "record_id": "flaws_cloudtrail:0000375:da3faace-7226-4578-b684-d686a52ee845", "row_index": 375, "timestamp": "2018-06-21T22:45:35Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da3faace-7226-4578-b684-d686a52ee845", "eventTime": "2018-06-21T22:45:35Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8128afb7-4426-4dd0-84c3-b9bc1c25a8c8", "record_id": "flaws_cloudtrail:0000376:8128afb7-4426-4dd0-84c3-b9bc1c25a8c8", "row_index": 376, "timestamp": "2018-06-21T22:45:35Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8128afb7-4426-4dd0-84c3-b9bc1c25a8c8", "eventTime": "2018-06-21T22:45:35Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76fc052d-041b-408a-b10a-39ac1b9724b4", "record_id": "flaws_cloudtrail:0000377:76fc052d-041b-408a-b10a-39ac1b9724b4", "row_index": 377, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76fc052d-041b-408a-b10a-39ac1b9724b4", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c32da7-acbc-41a3-8f19-967a620a92d8", "record_id": "flaws_cloudtrail:0000378:a6c32da7-acbc-41a3-8f19-967a620a92d8", "row_index": 378, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c32da7-acbc-41a3-8f19-967a620a92d8", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1b03eb9-afbb-4b28-9550-2ed9699e5cc2", "record_id": "flaws_cloudtrail:0000379:f1b03eb9-afbb-4b28-9550-2ed9699e5cc2", "row_index": 379, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1b03eb9-afbb-4b28-9550-2ed9699e5cc2", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2913dcd8-05ec-4476-8b61-084351afb24c7", "record_id": "flaws_cloudtrail:0000380:2913dcd8-05ec-4476-8b61-084351afb24c7", "row_index": 380, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2913dcd8-05ec-4476-8b61-084351afb24c7", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "19de420c-0548-4f7d-ab0c-16b80b07eff0", "record_id": "flaws_cloudtrail:0000381:19de420c-0548-4f7d-ab0c-16b80b07eff0", "row_index": 381, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "19de420c-0548-4f7d-ab0c-16b80b07eff0", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caf4b942-da28-4c44-aa86-dd0493c670de", "record_id": "flaws_cloudtrail:0000382:caf4b942-da28-4c44-aa86-dd0493c670de", "row_index": 382, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caf4b942-da28-4c44-aa86-dd0493c670de", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401de035-c0a7-4fcc-90dc-488672f41ce1", "record_id": "flaws_cloudtrail:0000383:401de035-c0a7-4fcc-90dc-488672f41ce1", "row_index": 383, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401de035-c0a7-4fcc-90dc-488672f41ce1", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "53e2e6b7-e133-42d5-b675-9d7ac02431b", "record_id": "flaws_cloudtrail:0000384:53e2e6b7-e133-42d5-b675-9d7ac02431b", "row_index": 384, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "53e2e6b7-e133-42d5-b675-9d7ac02431b", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5332f061-2230-4efa-afab-83df0113c357", "record_id": "flaws_cloudtrail:0000385:5332f061-2230-4efa-afab-83df0113c357", "row_index": 385, "timestamp": "2018-06-21T22:45:36Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5332f061-2230-4efa-afab-83df0113c357", "eventTime": "2018-06-21T22:45:36Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b50a0741-ba5f-4cbe-9cc2-4d2b6655c1ac", "record_id": "flaws_cloudtrail:0000386:b50a0741-ba5f-4cbe-9cc2-4d2b6655c1ac", "row_index": 386, "timestamp": "2018-06-21T22:45:37Z", "event_type": "DescribeStacks", "event_source": "cloudformation.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b50a0741-ba5f-4cbe-9cc2-4d2b6655c1ac", "eventTime": "2018-06-21T22:45:37Z", "eventName": "DescribeStacks", "eventSource": "cloudformation.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be638c18-d233-4119-9093-387c3c5e399c", "record_id": "flaws_cloudtrail:0000387:be638c18-d233-4119-9093-387c3c5e399c", "row_index": 387, "timestamp": "2018-06-21T22:45:41Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 781, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be638c18-d233-4119-9093-387c3c5e399c", "eventTime": "2018-06-21T22:45:41Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"userId": "AIDADO2GQD0K8TEF7KW1V", "account": "811596193553", "arn": "arn:aws:iam::811596193553:user/Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0c6ba44c-90d6-4df7-aba9-15219f0df89e", "record_id": "flaws_cloudtrail:0000388:0c6ba44c-90d6-4df7-aba9-15219f0df89e", "row_index": 388, "timestamp": "2018-06-21T22:45:55Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0c6ba44c-90d6-4df7-aba9-15219f0df89e", "eventTime": "2018-06-21T22:45:55Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7df231ab-399f-45d2-bbeb-6ec88e2ec112", "record_id": "flaws_cloudtrail:0000389:7df231ab-399f-45d2-bbeb-6ec88e2ec112", "row_index": 389, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7df231ab-399f-45d2-bbeb-6ec88e2ec112", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b73e6f2-1973-454d-b0d1-02c24b42118", "record_id": "flaws_cloudtrail:0000390:3b73e6f2-1973-454d-b0d1-02c24b42118", "row_index": 390, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b73e6f2-1973-454d-b0d1-02c24b42118", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f23773e-70bf-496b-ab8d-1884696462bb", "record_id": "flaws_cloudtrail:0000391:9f23773e-70bf-496b-ab8d-1884696462bb", "row_index": 391, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f23773e-70bf-496b-ab8d-1884696462bb", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c06f8d02-a8fc-45a6-909d-2183f8120fd1", "record_id": "flaws_cloudtrail:0000392:c06f8d02-a8fc-45a6-909d-2183f8120fd1", "row_index": 392, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c06f8d02-a8fc-45a6-909d-2183f8120fd1", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ead312f-35d2-488b-a5ee-7f51a3b4671e", "record_id": "flaws_cloudtrail:0000393:4ead312f-35d2-488b-a5ee-7f51a3b4671e", "row_index": 393, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ead312f-35d2-488b-a5ee-7f51a3b4671e", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82f6e79b-3d49-4fcb-bcb9-77cbffe7a6db", "record_id": "flaws_cloudtrail:0000394:82f6e79b-3d49-4fcb-bcb9-77cbffe7a6db", "row_index": 394, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 783, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82f6e79b-3d49-4fcb-bcb9-77cbffe7a6db", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b84cbf1-38d0-4e9d-bb9d-35f7e54eae16", "record_id": "flaws_cloudtrail:0000395:1b84cbf1-38d0-4e9d-bb9d-35f7e54eae16", "row_index": 395, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b84cbf1-38d0-4e9d-bb9d-35f7e54eae16", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "644387ef7-0ce3-4254-b8fa-b4e48a2bfdb7", "record_id": "flaws_cloudtrail:0000396:644387ef7-0ce3-4254-b8fa-b4e48a2bfdb7", "row_index": 396, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 784, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "644387ef7-0ce3-4254-b8fa-b4e48a2bfdb7", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b194d35a-8ff2-45d2-aea8-a13b71cae57a", "record_id": "flaws_cloudtrail:0000397:b194d35a-8ff2-45d2-aea8-a13b71cae57a", "row_index": 397, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b194d35a-8ff2-45d2-aea8-a13b71cae57a", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b4b4dd7-aac1-4a1c-ba21-21cf52079", "record_id": "flaws_cloudtrail:0000398:3b4b4dd7-aac1-4a1c-ba21-21cf52079", "row_index": 398, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b4b4dd7-aac1-4a1c-ba21-21cf52079", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed34fb52-90ad-4529-aef8-7b334e392845", "record_id": "flaws_cloudtrail:0000399:ed34fb52-90ad-4529-aef8-7b334e392845", "row_index": 399, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed34fb52-90ad-4529-aef8-7b334e392845", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d642382-ba8f-4a99-aeb9-aef3abd3cc89", "record_id": "flaws_cloudtrail:0000400:d642382-ba8f-4a99-aeb9-aef3abd3cc89", "row_index": 400, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d642382-ba8f-4a99-aeb9-aef3abd3cc89", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db7c6830-a044-46e6-84bd-eb077e43b5bc", "record_id": "flaws_cloudtrail:0000401:db7c6830-a044-46e6-84bd-eb077e43b5bc", "row_index": 401, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db7c6830-a044-46e6-84bd-eb077e43b5bc", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b52b5b7a-a376-45bc-b9e7-450bf8a1a08c", "record_id": "flaws_cloudtrail:0000402:b52b5b7a-a376-45bc-b9e7-450bf8a1a08c", "row_index": 402, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b52b5b7a-a376-45bc-b9e7-450bf8a1a08c", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6aa3580-d074-4c80-b826-4a25c8b01aba", "record_id": "flaws_cloudtrail:0000403:e6aa3580-d074-4c80-b826-4a25c8b01aba", "row_index": 403, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6aa3580-d074-4c80-b826-4a25c8b01aba", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1841c69b-95ff-4136-8ec7-4d8c0927db66", "record_id": "flaws_cloudtrail:0000404:1841c69b-95ff-4136-8ec7-4d8c0927db66", "row_index": 404, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1841c69b-95ff-4136-8ec7-4d8c0927db66", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e233d415-13dc-49e3-b5b7-fde866f178668", "record_id": "flaws_cloudtrail:0000405:e233d415-13dc-49e3-b5b7-fde866f178668", "row_index": 405, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e233d415-13dc-49e3-b5b7-fde866f178668", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae401b13-7940-4c95-ad9f-9dc52b67e5ce", "record_id": "flaws_cloudtrail:0000406:ae401b13-7940-4c95-ad9f-9dc52b67e5ce", "row_index": 406, "timestamp": "2018-06-21T22:45:56Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae401b13-7940-4c95-ad9f-9dc52b67e5ce", "eventTime": "2018-06-21T22:45:56Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "940870-6ead-461a-88a5-04e5b7af4a2e", "record_id": "flaws_cloudtrail:0000407:940870-6ead-461a-88a5-04e5b7af4a2e", "row_index": 407, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "940870-6ead-461a-88a5-04e5b7af4a2e", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f170a36f-a193-48f3-8562-c3d9d526b867", "record_id": "flaws_cloudtrail:0000408:f170a36f-a193-48f3-8562-c3d9d526b867", "row_index": 408, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f170a36f-a193-48f3-8562-c3d9d526b867", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f17c14d9-1bb4-4f06-b4fa-52cb66fe986c", "record_id": "flaws_cloudtrail:0000409:f17c14d9-1bb4-4f06-b4fa-52cb66fe986c", "row_index": 409, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f17c14d9-1bb4-4f06-b4fa-52cb66fe986c", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bc0cbe2-e6f0-49c0-b96f-b4452a3ac82d", "record_id": "flaws_cloudtrail:0000410:3bc0cbe2-e6f0-49c0-b96f-b4452a3ac82d", "row_index": 410, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bc0cbe2-e6f0-49c0-b96f-b4452a3ac82d", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "147fc420-4e52-4ed8-a542-2a0dd283758", "record_id": "flaws_cloudtrail:0000411:147fc420-4e52-4ed8-a542-2a0dd283758", "row_index": 411, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "147fc420-4e52-4ed8-a542-2a0dd283758", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99160f18-a5ce-4bd4-8e3b-6fffe4754017", "record_id": "flaws_cloudtrail:0000412:99160f18-a5ce-4bd4-8e3b-6fffe4754017", "row_index": 412, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99160f18-a5ce-4bd4-8e3b-6fffe4754017", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4360ff51-acf0-4ae8-8076-caf06c9f457d", "record_id": "flaws_cloudtrail:0000413:4360ff51-acf0-4ae8-8076-caf06c9f457d", "row_index": 413, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4360ff51-acf0-4ae8-8076-caf06c9f457d", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f945e354-9069-49ad-836e-4f83438d78a2", "record_id": "flaws_cloudtrail:0000414:f945e354-9069-49ad-836e-4f83438d78a2", "row_index": 414, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f945e354-9069-49ad-836e-4f83438d78a2", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b82dfd5f-74cc-4910-a191-53b097614ce", "record_id": "flaws_cloudtrail:0000415:b82dfd5f-74cc-4910-a191-53b097614ce", "row_index": 415, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b82dfd5f-74cc-4910-a191-53b097614ce", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a003833-087b-4c1c-bea5-039ac397904c", "record_id": "flaws_cloudtrail:0000416:a003833-087b-4c1c-bea5-039ac397904c", "row_index": 416, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a003833-087b-4c1c-bea5-039ac397904c", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdfa4615-1edc-4f47-bc71-cb442292abb8", "record_id": "flaws_cloudtrail:0000417:bdfa4615-1edc-4f47-bc71-cb442292abb8", "row_index": 417, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdfa4615-1edc-4f47-bc71-cb442292abb8", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86d4bf7e-a5a9-4d3a-aa3d-195e0f5003d7", "record_id": "flaws_cloudtrail:0000418:86d4bf7e-a5a9-4d3a-aa3d-195e0f5003d7", "row_index": 418, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86d4bf7e-a5a9-4d3a-aa3d-195e0f5003d7", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46a63596-909d-4f45-865d-1a2fe477cef1", "record_id": "flaws_cloudtrail:0000419:46a63596-909d-4f45-865d-1a2fe477cef1", "row_index": 419, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 782, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46a63596-909d-4f45-865d-1a2fe477cef1", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8950ab9-d678-4f00-9a32-65fbf0c9d0e2", "record_id": "flaws_cloudtrail:0000420:b8950ab9-d678-4f00-9a32-65fbf0c9d0e2", "row_index": 420, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8950ab9-d678-4f00-9a32-65fbf0c9d0e2", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40d8f2f5-1137-4a1e-92b5-4d9be3f4c895", "record_id": "flaws_cloudtrail:0000421:40d8f2f5-1137-4a1e-92b5-4d9be3f4c895", "row_index": 421, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40d8f2f5-1137-4a1e-92b5-4d9be3f4c895", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dbd9251-1f54-4dd0-9c34-708bb9c98c8e", "record_id": "flaws_cloudtrail:0000422:3dbd9251-1f54-4dd0-9c34-708bb9c98c8e", "row_index": 422, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dbd9251-1f54-4dd0-9c34-708bb9c98c8e", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d9a0b23-b845-4898-b7f5-9f9637e362580", "record_id": "flaws_cloudtrail:0000423:6d9a0b23-b845-4898-b7f5-9f9637e362580", "row_index": 423, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 779, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d9a0b23-b845-4898-b7f5-9f9637e362580", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b50106b-c70e-4b48-98b8-f99a3fb297c4", "record_id": "flaws_cloudtrail:0000424:b50106b-c70e-4b48-98b8-f99a3fb297c4", "row_index": 424, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 777, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b50106b-c70e-4b48-98b8-f99a3fb297c4", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9aa9ce5f-c551-441b-b629-9ae4c124075c", "record_id": "flaws_cloudtrail:0000425:9aa9ce5f-c551-441b-b629-9ae4c124075c", "row_index": 425, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9aa9ce5f-c551-441b-b629-9ae4c124075c", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dbeec597-c232-4226-86d1-0ffad589f159", "record_id": "flaws_cloudtrail:0000426:dbeec597-c232-4226-86d1-0ffad589f159", "row_index": 426, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dbeec597-c232-4226-86d1-0ffad589f159", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76f7c13a-1063-468c-bada-b9933ed75aa9", "record_id": "flaws_cloudtrail:0000427:76f7c13a-1063-468c-bada-b9933ed75aa9", "row_index": 427, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76f7c13a-1063-468c-bada-b9933ed75aa9", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "673cc215-eea7-400e-95a6-c69f7b9cc952", "record_id": "flaws_cloudtrail:0000428:673cc215-eea7-400e-95a6-c69f7b9cc952", "row_index": 428, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "673cc215-eea7-400e-95a6-c69f7b9cc952", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae8da734-858a-4036-9938-d80990d84", "record_id": "flaws_cloudtrail:0000429:ae8da734-858a-4036-9938-d80990d84", "row_index": 429, "timestamp": "2018-06-21T22:45:57Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 775, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae8da734-858a-4036-9938-d80990d84", "eventTime": "2018-06-21T22:45:57Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e806858e-35d0-4cce-9d74-ffe3afebfb8e", "record_id": "flaws_cloudtrail:0000430:e806858e-35d0-4cce-9d74-ffe3afebfb8e", "row_index": 430, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e806858e-35d0-4cce-9d74-ffe3afebfb8e", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb7f8c24-f4a9-4653-b7b9-99b0886b462d", "record_id": "flaws_cloudtrail:0000431:cb7f8c24-f4a9-4653-b7b9-99b0886b462d", "row_index": 431, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb7f8c24-f4a9-4653-b7b9-99b0886b462d", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8f25ff9-61c7-41c1-a7d8-ae8184e059181", "record_id": "flaws_cloudtrail:0000432:d8f25ff9-61c7-41c1-a7d8-ae8184e059181", "row_index": 432, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8f25ff9-61c7-41c1-a7d8-ae8184e059181", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ed47079-b005-46a4-9d77-894d261a6b13", "record_id": "flaws_cloudtrail:0000433:9ed47079-b005-46a4-9d77-894d261a6b13", "row_index": 433, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ed47079-b005-46a4-9d77-894d261a6b13", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06560-4445-4b02-aab0-04bea93c48ff", "record_id": "flaws_cloudtrail:0000434:06560-4445-4b02-aab0-04bea93c48ff", "row_index": 434, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06560-4445-4b02-aab0-04bea93c48ff", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b19e4485-4bfc-4e34-81e0-f9964fbf208c", "record_id": "flaws_cloudtrail:0000435:b19e4485-4bfc-4e34-81e0-f9964fbf208c", "row_index": 435, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b19e4485-4bfc-4e34-81e0-f9964fbf208c", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "09b2decf-44ba-4ee6-883d-d4b02716cf9c", "record_id": "flaws_cloudtrail:0000436:09b2decf-44ba-4ee6-883d-d4b02716cf9c", "row_index": 436, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "09b2decf-44ba-4ee6-883d-d4b02716cf9c", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c886690e-2021-4509-b317-1ee2ff38948d", "record_id": "flaws_cloudtrail:0000437:c886690e-2021-4509-b317-1ee2ff38948d", "row_index": 437, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c886690e-2021-4509-b317-1ee2ff38948d", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fda6de0-7bca-4a95-b2e5-ee29f26f5ff4", "record_id": "flaws_cloudtrail:0000438:1fda6de0-7bca-4a95-b2e5-ee29f26f5ff4", "row_index": 438, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fda6de0-7bca-4a95-b2e5-ee29f26f5ff4", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04f3cbd4-05a9-4700-bfb2-267d2f54ca37", "record_id": "flaws_cloudtrail:0000439:04f3cbd4-05a9-4700-bfb2-267d2f54ca37", "row_index": 439, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04f3cbd4-05a9-4700-bfb2-267d2f54ca37", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f47aa8e1-b4de-4107-85f7-644684cd05", "record_id": "flaws_cloudtrail:0000440:f47aa8e1-b4de-4107-85f7-644684cd05", "row_index": 440, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f47aa8e1-b4de-4107-85f7-644684cd05", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dfe48de-9def-460e-a572-8a96a05ee3f7", "record_id": "flaws_cloudtrail:0000441:6dfe48de-9def-460e-a572-8a96a05ee3f7", "row_index": 441, "timestamp": "2018-06-21T22:45:58Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dfe48de-9def-460e-a572-8a96a05ee3f7", "eventTime": "2018-06-21T22:45:58Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2c28c8aa-df0f-4b88-bb9f-a96f419615d5", "record_id": "flaws_cloudtrail:0000442:2c28c8aa-df0f-4b88-bb9f-a96f419615d5", "row_index": 442, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2c28c8aa-df0f-4b88-bb9f-a96f419615d5", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "679776f7-916f-4281-b9a8-b5eec52be13f", "record_id": "flaws_cloudtrail:0000443:679776f7-916f-4281-b9a8-b5eec52be13f", "row_index": 443, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "679776f7-916f-4281-b9a8-b5eec52be13f", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b8c34a2-8e93-4741-8a73-2dd74459dc13", "record_id": "flaws_cloudtrail:0000444:8b8c34a2-8e93-4741-8a73-2dd74459dc13", "row_index": 444, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b8c34a2-8e93-4741-8a73-2dd74459dc13", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9afd851b-8cb0-4da2-823d-73acd19b7d26", "record_id": "flaws_cloudtrail:0000445:9afd851b-8cb0-4da2-823d-73acd19b7d26", "row_index": 445, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9afd851b-8cb0-4da2-823d-73acd19b7d26", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "871362cf-491d-4446-97a7-fd39e4ea109b", "record_id": "flaws_cloudtrail:0000446:871362cf-491d-4446-97a7-fd39e4ea109b", "row_index": 446, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "871362cf-491d-4446-97a7-fd39e4ea109b", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f560059b-21fc-4678-9f67-816db801916", "record_id": "flaws_cloudtrail:0000447:2f560059b-21fc-4678-9f67-816db801916", "row_index": 447, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f560059b-21fc-4678-9f67-816db801916", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c50cf16-9e5a-40ed-995c-896cb987261e", "record_id": "flaws_cloudtrail:0000448:7c50cf16-9e5a-40ed-995c-896cb987261e", "row_index": 448, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c50cf16-9e5a-40ed-995c-896cb987261e", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fb461c4-2ebf-49f2-b66b-df96f50f26e5", "record_id": "flaws_cloudtrail:0000449:1fb461c4-2ebf-49f2-b66b-df96f50f26e5", "row_index": 449, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fb461c4-2ebf-49f2-b66b-df96f50f26e5", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a877d2e4-271e-4552-a15e-af69f4982309", "record_id": "flaws_cloudtrail:0000450:a877d2e4-271e-4552-a15e-af69f4982309", "row_index": 450, "timestamp": "2018-06-21T22:45:59Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a877d2e4-271e-4552-a15e-af69f4982309", "eventTime": "2018-06-21T22:45:59Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aae10609-06c9-417c-bf7a-2b0608f2ae4a", "record_id": "flaws_cloudtrail:0000451:aae10609-06c9-417c-bf7a-2b0608f2ae4a", "row_index": 451, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aae10609-06c9-417c-bf7a-2b0608f2ae4a", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d266f729-2852-4e2a-bee0-d7bfdcc397756", "record_id": "flaws_cloudtrail:0000452:d266f729-2852-4e2a-bee0-d7bfdcc397756", "row_index": 452, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d266f729-2852-4e2a-bee0-d7bfdcc397756", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "249356c2d-05b9-496b-9259-27acab194cc1", "record_id": "flaws_cloudtrail:0000453:249356c2d-05b9-496b-9259-27acab194cc1", "row_index": 453, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "249356c2d-05b9-496b-9259-27acab194cc1", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "853c6f04-cf36-464d-9ac4-25d2c168b4b0", "record_id": "flaws_cloudtrail:0000454:853c6f04-cf36-464d-9ac4-25d2c168b4b0", "row_index": 454, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "853c6f04-cf36-464d-9ac4-25d2c168b4b0", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b7139f31-e024-4324-8351-e93276fd6b7", "record_id": "flaws_cloudtrail:0000455:b7139f31-e024-4324-8351-e93276fd6b7", "row_index": 455, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 776, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b7139f31-e024-4324-8351-e93276fd6b7", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb27985-dc37-42b6-9ea7-7578d862a79b", "record_id": "flaws_cloudtrail:0000456:fb27985-dc37-42b6-9ea7-7578d862a79b", "row_index": 456, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb27985-dc37-42b6-9ea7-7578d862a79b", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a58e3b8-f67c-4f15-be25-9315c42b69a7", "record_id": "flaws_cloudtrail:0000457:4a58e3b8-f67c-4f15-be25-9315c42b69a7", "row_index": 457, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a58e3b8-f67c-4f15-be25-9315c42b69a7", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd022e80-6104-456e-898a-5ddd26c0dd73", "record_id": "flaws_cloudtrail:0000458:bd022e80-6104-456e-898a-5ddd26c0dd73", "row_index": 458, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd022e80-6104-456e-898a-5ddd26c0dd73", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb04ce9a-faf0-4568-a4e2-8dd8614c95ad", "record_id": "flaws_cloudtrail:0000459:cb04ce9a-faf0-4568-a4e2-8dd8614c95ad", "row_index": 459, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb04ce9a-faf0-4568-a4e2-8dd8614c95ad", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b0d632d-29f6-4c1f-9888-d137589f307", "record_id": "flaws_cloudtrail:0000460:9b0d632d-29f6-4c1f-9888-d137589f307", "row_index": 460, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b0d632d-29f6-4c1f-9888-d137589f307", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0935c68e-a1bc-4391-919d-1802b6b777db", "record_id": "flaws_cloudtrail:0000461:0935c68e-a1bc-4391-919d-1802b6b777db", "row_index": 461, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0935c68e-a1bc-4391-919d-1802b6b777db", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e347cc15-3662-451f-855e-5c4807dcf6bf", "record_id": "flaws_cloudtrail:0000462:e347cc15-3662-451f-855e-5c4807dcf6bf", "row_index": 462, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e347cc15-3662-451f-855e-5c4807dcf6bf", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e333e20-ca89-4d46-88a3-f3e32af77447", "record_id": "flaws_cloudtrail:0000463:6e333e20-ca89-4d46-88a3-f3e32af77447", "row_index": 463, "timestamp": "2018-06-21T22:46:00Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 778, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e333e20-ca89-4d46-88a3-f3e32af77447", "eventTime": "2018-06-21T22:46:00Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "79d6bc60-b764-468b-9445-0e01b2d62a39", "record_id": "flaws_cloudtrail:0000464:79d6bc60-b764-468b-9445-0e01b2d62a39", "row_index": 464, "timestamp": "2018-06-21T22:46:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "79d6bc60-b764-468b-9445-0e01b2d62a39", "eventTime": "2018-06-21T22:46:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1e0b338-a70b-4a9f-bae9-d5c6e181dea4", "record_id": "flaws_cloudtrail:0000465:b1e0b338-a70b-4a9f-bae9-d5c6e181dea4", "row_index": 465, "timestamp": "2018-06-21T22:46:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1e0b338-a70b-4a9f-bae9-d5c6e181dea4", "eventTime": "2018-06-21T22:46:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c46e8595-379c-4784-a3ec-924f62fa3ea1", "record_id": "flaws_cloudtrail:0000466:c46e8595-379c-4784-a3ec-924f62fa3ea1", "row_index": 466, "timestamp": "2018-06-21T22:46:07Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c46e8595-379c-4784-a3ec-924f62fa3ea1", "eventTime": "2018-06-21T22:46:07Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e424152b-b87d-4009-a956-b83c43472b0e", "record_id": "flaws_cloudtrail:0000467:2e424152b-b87d-4009-a956-b83c43472b0e", "row_index": 467, "timestamp": "2018-06-21T22:46:07Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e424152b-b87d-4009-a956-b83c43472b0e", "eventTime": "2018-06-21T22:46:07Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "00b32582-e0f7-4a12-996c-2c272ff37eef", "record_id": "flaws_cloudtrail:0000468:00b32582-e0f7-4a12-996c-2c272ff37eef", "row_index": 468, "timestamp": "2018-06-21T22:46:07Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "00b32582-e0f7-4a12-996c-2c272ff37eef", "eventTime": "2018-06-21T22:46:07Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdbaca83-0b65-4749-9161-07b7c9e1cb20", "record_id": "flaws_cloudtrail:0000469:bdbaca83-0b65-4749-9161-07b7c9e1cb20", "row_index": 469, "timestamp": "2018-06-21T22:46:07Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdbaca83-0b65-4749-9161-07b7c9e1cb20", "eventTime": "2018-06-21T22:46:07Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5415ef5a-2370-429e-8689-582a076dbd70", "record_id": "flaws_cloudtrail:0000470:5415ef5a-2370-429e-8689-582a076dbd70", "row_index": 470, "timestamp": "2018-06-21T22:46:07Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5415ef5a-2370-429e-8689-582a076dbd70", "eventTime": "2018-06-21T22:46:07Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "92a8aa3d-6e49-44dd-a078-abdd5d3ee2e7", "record_id": "flaws_cloudtrail:0000471:92a8aa3d-6e49-44dd-a078-abdd5d3ee2e7", "row_index": 471, "timestamp": "2018-06-21T22:46:07Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "92a8aa3d-6e49-44dd-a078-abdd5d3ee2e7", "eventTime": "2018-06-21T22:46:07Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdf3de3b-c51d-468a-8683-78440ecb23a9", "record_id": "flaws_cloudtrail:0000472:fdf3de3b-c51d-468a-8683-78440ecb23a9", "row_index": 472, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdf3de3b-c51d-468a-8683-78440ecb23a9", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f9ca8b6-381c-47e6-8d97-c3bf565cb6b3", "record_id": "flaws_cloudtrail:0000473:3f9ca8b6-381c-47e6-8d97-c3bf565cb6b3", "row_index": 473, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f9ca8b6-381c-47e6-8d97-c3bf565cb6b3", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28acc624-c1ed-40d0-9b49-ebc2648eb16d", "record_id": "flaws_cloudtrail:0000474:28acc624-c1ed-40d0-9b49-ebc2648eb16d", "row_index": 474, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28acc624-c1ed-40d0-9b49-ebc2648eb16d", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dbfa61f-bae6-4265-a7fc-a8190b0dd3a9", "record_id": "flaws_cloudtrail:0000475:3dbfa61f-bae6-4265-a7fc-a8190b0dd3a9", "row_index": 475, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dbfa61f-bae6-4265-a7fc-a8190b0dd3a9", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17f31d5b-f845-4f6c-b8ab-002875160427", "record_id": "flaws_cloudtrail:0000476:17f31d5b-f845-4f6c-b8ab-002875160427", "row_index": 476, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17f31d5b-f845-4f6c-b8ab-002875160427", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "124043e-13a1-4b80-aca0-5dea833c0ac5", "record_id": "flaws_cloudtrail:0000477:124043e-13a1-4b80-aca0-5dea833c0ac5", "row_index": 477, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "124043e-13a1-4b80-aca0-5dea833c0ac5", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0cb73c1-5c43-4ada-b850-d32e88ed9972", "record_id": "flaws_cloudtrail:0000478:f0cb73c1-5c43-4ada-b850-d32e88ed9972", "row_index": 478, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0cb73c1-5c43-4ada-b850-d32e88ed9972", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1f1c592-edbf-408f-98af-d7084c324f8a", "record_id": "flaws_cloudtrail:0000479:a1f1c592-edbf-408f-98af-d7084c324f8a", "row_index": 479, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1f1c592-edbf-408f-98af-d7084c324f8a", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e781aff-0465-4d27-8e18-a3ebc1f2ea4f", "record_id": "flaws_cloudtrail:0000480:6e781aff-0465-4d27-8e18-a3ebc1f2ea4f", "row_index": 480, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e781aff-0465-4d27-8e18-a3ebc1f2ea4f", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0741bfac-139f-4646-9d6b-c246d2a9b3b3", "record_id": "flaws_cloudtrail:0000481:0741bfac-139f-4646-9d6b-c246d2a9b3b3", "row_index": 481, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0741bfac-139f-4646-9d6b-c246d2a9b3b3", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a86963d-0885-4ebb-b9c5-097d103af0ea", "record_id": "flaws_cloudtrail:0000482:a86963d-0885-4ebb-b9c5-097d103af0ea", "row_index": 482, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a86963d-0885-4ebb-b9c5-097d103af0ea", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ebb0298-629a-4b6d-8a67-13f8397b0152", "record_id": "flaws_cloudtrail:0000483:2ebb0298-629a-4b6d-8a67-13f8397b0152", "row_index": 483, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ebb0298-629a-4b6d-8a67-13f8397b0152", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7cb4657f-49bf-4b93-ae22-bbc9e63375", "record_id": "flaws_cloudtrail:0000484:7cb4657f-49bf-4b93-ae22-bbc9e63375", "row_index": 484, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7cb4657f-49bf-4b93-ae22-bbc9e63375", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ae0e35a-4d1e-4ecf-9aeb-e264906c335f", "record_id": "flaws_cloudtrail:0000485:1ae0e35a-4d1e-4ecf-9aeb-e264906c335f", "row_index": 485, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ae0e35a-4d1e-4ecf-9aeb-e264906c335f", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f385484de-34dd-402e-b840-8ff750be3fa6", "record_id": "flaws_cloudtrail:0000486:f385484de-34dd-402e-b840-8ff750be3fa6", "row_index": 486, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA4JFB56QWX5BUMXI6", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f385484de-34dd-402e-b840-8ff750be3fa6", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA4JFB56QWX5BUMXI6", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:07Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9c595883-a185-4c96-a3e0-25beeff0110a", "record_id": "flaws_cloudtrail:0000487:e9c595883-a185-4c96-a3e0-25beeff0110a", "row_index": 487, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9c595883-a185-4c96-a3e0-25beeff0110a", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7c76c54-62cb-4fb4-8658-271dade0a71b", "record_id": "flaws_cloudtrail:0000488:d7c76c54-62cb-4fb4-8658-271dade0a71b", "row_index": 488, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7c76c54-62cb-4fb4-8658-271dade0a71b", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fceef8ff-769c-411d-ab61-6285d151accc", "record_id": "flaws_cloudtrail:0000489:fceef8ff-769c-411d-ab61-6285d151accc", "row_index": 489, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fceef8ff-769c-411d-ab61-6285d151accc", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "839d799a-7cd8-4405-acb7-41eca2f80e53", "record_id": "flaws_cloudtrail:0000490:839d799a-7cd8-4405-acb7-41eca2f80e53", "row_index": 490, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "839d799a-7cd8-4405-acb7-41eca2f80e53", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73abd9bd-9f50-4ff4-bd3a-f7c7d7a0a470", "record_id": "flaws_cloudtrail:0000491:73abd9bd-9f50-4ff4-bd3a-f7c7d7a0a470", "row_index": 491, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73abd9bd-9f50-4ff4-bd3a-f7c7d7a0a470", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e7fe0b29-2e0f-48b0-8c48-b139b3495b2b", "record_id": "flaws_cloudtrail:0000492:e7fe0b29-2e0f-48b0-8c48-b139b3495b2b", "row_index": 492, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e7fe0b29-2e0f-48b0-8c48-b139b3495b2b", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bc91857-9552-449a-bba7-dec04b9b1586", "record_id": "flaws_cloudtrail:0000493:6bc91857-9552-449a-bba7-dec04b9b1586", "row_index": 493, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bc91857-9552-449a-bba7-dec04b9b1586", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "27e77da2-f181-4bd0-a1e6-d39a0c41153e", "record_id": "flaws_cloudtrail:0000494:27e77da2-f181-4bd0-a1e6-d39a0c41153e", "row_index": 494, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "27e77da2-f181-4bd0-a1e6-d39a0c41153e", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "729cd31d-2f15-4eac-aa32-c836e8eac2d4", "record_id": "flaws_cloudtrail:0000495:729cd31d-2f15-4eac-aa32-c836e8eac2d4", "row_index": 495, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "729cd31d-2f15-4eac-aa32-c836e8eac2d4", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "087e0ebd-fb4f-4575-9195-6dedda9ea5e2", "record_id": "flaws_cloudtrail:0000496:087e0ebd-fb4f-4575-9195-6dedda9ea5e2", "row_index": 496, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "087e0ebd-fb4f-4575-9195-6dedda9ea5e2", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "312858cf-2403-4442-b5d7-9b9dd2474a4e", "record_id": "flaws_cloudtrail:0000497:312858cf-2403-4442-b5d7-9b9dd2474a4e", "row_index": 497, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "312858cf-2403-4442-b5d7-9b9dd2474a4e", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4739c9d3-673b-49ab-a6fc-402e0ff46fa0", "record_id": "flaws_cloudtrail:0000498:4739c9d3-673b-49ab-a6fc-402e0ff46fa0", "row_index": 498, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4739c9d3-673b-49ab-a6fc-402e0ff46fa0", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "177ff5f6-7686-44ae-a698-ddac4e3f206a", "record_id": "flaws_cloudtrail:0000499:177ff5f6-7686-44ae-a698-ddac4e3f206a", "row_index": 499, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "177ff5f6-7686-44ae-a698-ddac4e3f206a", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ad21719-c199-49d8-8b58-ca81e0b213255", "record_id": "flaws_cloudtrail:0000500:8ad21719-c199-49d8-8b58-ca81e0b213255", "row_index": 500, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ad21719-c199-49d8-8b58-ca81e0b213255", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d28b0293-6419-44c4-a77f-26dc2a00ac3d", "record_id": "flaws_cloudtrail:0000501:d28b0293-6419-44c4-a77f-26dc2a00ac3d", "row_index": 501, "timestamp": "2018-06-21T22:46:08Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d28b0293-6419-44c4-a77f-26dc2a00ac3d", "eventTime": "2018-06-21T22:46:08Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c83947-a355-403c-998e-92462f08ae02", "record_id": "flaws_cloudtrail:0000502:c83947-a355-403c-998e-92462f08ae02", "row_index": 502, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c83947-a355-403c-998e-92462f08ae02", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b190589a6-1264-468c-8ad3-dccd4c498647", "record_id": "flaws_cloudtrail:0000503:b190589a6-1264-468c-8ad3-dccd4c498647", "row_index": 503, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b190589a6-1264-468c-8ad3-dccd4c498647", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b4560e48-d6b1-4cf5-b483-18adb180482b", "record_id": "flaws_cloudtrail:0000504:b4560e48-d6b1-4cf5-b483-18adb180482b", "row_index": 504, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b4560e48-d6b1-4cf5-b483-18adb180482b", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "817219-8669-4376-9728-0ce7537abc7e", "record_id": "flaws_cloudtrail:0000505:817219-8669-4376-9728-0ce7537abc7e", "row_index": 505, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "817219-8669-4376-9728-0ce7537abc7e", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ee94453-68bb-4a9e-80ca-cb20b4c246d7", "record_id": "flaws_cloudtrail:0000506:9ee94453-68bb-4a9e-80ca-cb20b4c246d7", "row_index": 506, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA07ST3IUIVQOGI9PI", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ee94453-68bb-4a9e-80ca-cb20b4c246d7", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA07ST3IUIVQOGI9PI", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:07Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a7a4237-192e-449b-8d4c-951b64b89fee", "record_id": "flaws_cloudtrail:0000507:4a7a4237-192e-449b-8d4c-951b64b89fee", "row_index": 507, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIABCIBMOSWWCD262HY", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a7a4237-192e-449b-8d4c-951b64b89fee", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIABCIBMOSWWCD262HY", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:09Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3241cd61-fd67-419a-9127-2e62662cf3", "record_id": "flaws_cloudtrail:0000508:3241cd61-fd67-419a-9127-2e62662cf3", "row_index": 508, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3241cd61-fd67-419a-9127-2e62662cf3", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25e20735-93c1-4e9c-81ec-23e29ac66d45", "record_id": "flaws_cloudtrail:0000509:25e20735-93c1-4e9c-81ec-23e29ac66d45", "row_index": 509, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25e20735-93c1-4e9c-81ec-23e29ac66d45", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c9b7e28-07c3-432d-b3a9-15cf67288ca4", "record_id": "flaws_cloudtrail:0000510:8c9b7e28-07c3-432d-b3a9-15cf67288ca4", "row_index": 510, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c9b7e28-07c3-432d-b3a9-15cf67288ca4", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dedf206c-8221-48c2-a9f5-3c582645", "record_id": "flaws_cloudtrail:0000511:dedf206c-8221-48c2-a9f5-3c582645", "row_index": 511, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dedf206c-8221-48c2-a9f5-3c582645", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e48745-baef-4792-855f-1157ee0b439d", "record_id": "flaws_cloudtrail:0000512:14e48745-baef-4792-855f-1157ee0b439d", "row_index": 512, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e48745-baef-4792-855f-1157ee0b439d", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94772eb3-95e8-47b2-b4c1-8fdec577942", "record_id": "flaws_cloudtrail:0000513:94772eb3-95e8-47b2-b4c1-8fdec577942", "row_index": 513, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94772eb3-95e8-47b2-b4c1-8fdec577942", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "536a2bf0-8cd9-4617-98d2-93a5b64ad397", "record_id": "flaws_cloudtrail:0000514:536a2bf0-8cd9-4617-98d2-93a5b64ad397", "row_index": 514, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA4IF2JX392AO2X56N", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "536a2bf0-8cd9-4617-98d2-93a5b64ad397", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA4IF2JX392AO2X56N", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:07Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca89feaf-2453-4c1a-afab-1404c3964858", "record_id": "flaws_cloudtrail:0000515:ca89feaf-2453-4c1a-afab-1404c3964858", "row_index": 515, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca89feaf-2453-4c1a-afab-1404c3964858", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cdb8b30c-40ec-421e-9d13-4c1648caac4a", "record_id": "flaws_cloudtrail:0000516:cdb8b30c-40ec-421e-9d13-4c1648caac4a", "row_index": 516, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cdb8b30c-40ec-421e-9d13-4c1648caac4a", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "925d8db9-bca5-49c2-9da5-38a38df2c766", "record_id": "flaws_cloudtrail:0000517:925d8db9-bca5-49c2-9da5-38a38df2c766", "row_index": 517, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "925d8db9-bca5-49c2-9da5-38a38df2c766", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a1517f8-595e-4542-a1e8-c21a588008bf", "record_id": "flaws_cloudtrail:0000518:8a1517f8-595e-4542-a1e8-c21a588008bf", "row_index": 518, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a1517f8-595e-4542-a1e8-c21a588008bf", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bba0a254-b4f2-4fac-865a-c6cad38b7fa3", "record_id": "flaws_cloudtrail:0000519:bba0a254-b4f2-4fac-865a-c6cad38b7fa3", "row_index": 519, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bba0a254-b4f2-4fac-865a-c6cad38b7fa3", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa15c678-e8bd-4146-a600-aea22dedcbae", "record_id": "flaws_cloudtrail:0000520:aa15c678-e8bd-4146-a600-aea22dedcbae", "row_index": 520, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa15c678-e8bd-4146-a600-aea22dedcbae", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e739b0-3854-4238-8352-2c637e62fa43", "record_id": "flaws_cloudtrail:0000521:f0e739b0-3854-4238-8352-2c637e62fa43", "row_index": 521, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e739b0-3854-4238-8352-2c637e62fa43", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f476116-dcde-4b23-bbe4-16dc4ae074697", "record_id": "flaws_cloudtrail:0000522:f476116-dcde-4b23-bbe4-16dc4ae074697", "row_index": 522, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f476116-dcde-4b23-bbe4-16dc4ae074697", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "175f55ef-ba89-44ee-9e96-d56fd32db510", "record_id": "flaws_cloudtrail:0000523:175f55ef-ba89-44ee-9e96-d56fd32db510", "row_index": 523, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "175f55ef-ba89-44ee-9e96-d56fd32db510", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8102f66c-c65f-4efa-a1fb-244fc325f148", "record_id": "flaws_cloudtrail:0000524:8102f66c-c65f-4efa-a1fb-244fc325f148", "row_index": 524, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8102f66c-c65f-4efa-a1fb-244fc325f148", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8563cf34-9f74-4343-b619-203499b21c0", "record_id": "flaws_cloudtrail:0000525:8563cf34-9f74-4343-b619-203499b21c0", "row_index": 525, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8563cf34-9f74-4343-b619-203499b21c0", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "484f6583-28a4-4bcf-8f82-3436ec99845", "record_id": "flaws_cloudtrail:0000526:484f6583-28a4-4bcf-8f82-3436ec99845", "row_index": 526, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "484f6583-28a4-4bcf-8f82-3436ec99845", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe03c1c4-1eb8-4fd2-8cf1-8c5cf696176a", "record_id": "flaws_cloudtrail:0000527:fe03c1c4-1eb8-4fd2-8cf1-8c5cf696176a", "row_index": 527, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe03c1c4-1eb8-4fd2-8cf1-8c5cf696176a", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "487df8d7-22f9-47d4-aa21-e2e4fcc2cd5d", "record_id": "flaws_cloudtrail:0000528:487df8d7-22f9-47d4-aa21-e2e4fcc2cd5d", "row_index": 528, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "487df8d7-22f9-47d4-aa21-e2e4fcc2cd5d", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c94c7b12-0d87-41b8-be3c-f75cb357822d", "record_id": "flaws_cloudtrail:0000529:c94c7b12-0d87-41b8-be3c-f75cb357822d", "row_index": 529, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c94c7b12-0d87-41b8-be3c-f75cb357822d", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb7e1a26-29a8-4a58-849a-48d7721bc690", "record_id": "flaws_cloudtrail:0000530:fb7e1a26-29a8-4a58-849a-48d7721bc690", "row_index": 530, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb7e1a26-29a8-4a58-849a-48d7721bc690", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "086462de-019f-4a16-a00f-2a13d4ca3560", "record_id": "flaws_cloudtrail:0000531:086462de-019f-4a16-a00f-2a13d4ca3560", "row_index": 531, "timestamp": "2018-06-21T22:46:09Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "086462de-019f-4a16-a00f-2a13d4ca3560", "eventTime": "2018-06-21T22:46:09Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dc237344-a35e-4938-9adb-f37efb9246b2", "record_id": "flaws_cloudtrail:0000532:3dc237344-a35e-4938-9adb-f37efb9246b2", "row_index": 532, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dc237344-a35e-4938-9adb-f37efb9246b2", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0203da5c-a1ff-426e-bddd-d5b8d7c9d13e", "record_id": "flaws_cloudtrail:0000533:0203da5c-a1ff-426e-bddd-d5b8d7c9d13e", "row_index": 533, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0203da5c-a1ff-426e-bddd-d5b8d7c9d13e", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9955e43c-4b7d-4cfa-bcfa-6d6c50d61d6e", "record_id": "flaws_cloudtrail:0000534:9955e43c-4b7d-4cfa-bcfa-6d6c50d61d6e", "row_index": 534, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA2SPWBD5OOLLWQZ5H", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9955e43c-4b7d-4cfa-bcfa-6d6c50d61d6e", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA2SPWBD5OOLLWQZ5H", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:10Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9efc236e-9f3e-462e-ab07-b4ee4be9fe3c", "record_id": "flaws_cloudtrail:0000535:9efc236e-9f3e-462e-ab07-b4ee4be9fe3c", "row_index": 535, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA9CISSC9Y73I06GF5", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9efc236e-9f3e-462e-ab07-b4ee4be9fe3c", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA9CISSC9Y73I06GF5", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:10Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "65e6a442-c8e2-413c-ad70-0dd38df7adb6", "record_id": "flaws_cloudtrail:0000536:65e6a442-c8e2-413c-ad70-0dd38df7adb6", "row_index": 536, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "65e6a442-c8e2-413c-ad70-0dd38df7adb6", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ed33bc59-189c-4321-b9db-9b35098b89ae", "record_id": "flaws_cloudtrail:0000537:ed33bc59-189c-4321-b9db-9b35098b89ae", "row_index": 537, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA5EX9ZNS3MPY87691", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ed33bc59-189c-4321-b9db-9b35098b89ae", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA5EX9ZNS3MPY87691", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:07Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc81b589-9933-4236-8bd4-5174b7e104cf", "record_id": "flaws_cloudtrail:0000538:bc81b589-9933-4236-8bd4-5174b7e104cf", "row_index": 538, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc81b589-9933-4236-8bd4-5174b7e104cf", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56edd504-85d4-4cf6-979d-5f0e69e0ea7e", "record_id": "flaws_cloudtrail:0000539:56edd504-85d4-4cf6-979d-5f0e69e0ea7e", "row_index": 539, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56edd504-85d4-4cf6-979d-5f0e69e0ea7e", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4c5bc3f-40f0-4251-9212-1b86f8ad13c5", "record_id": "flaws_cloudtrail:0000540:d4c5bc3f-40f0-4251-9212-1b86f8ad13c5", "row_index": 540, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4c5bc3f-40f0-4251-9212-1b86f8ad13c5", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1a76148-6f23-4bed-ac89-0a159fab7723", "record_id": "flaws_cloudtrail:0000541:c1a76148-6f23-4bed-ac89-0a159fab7723", "row_index": 541, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1a76148-6f23-4bed-ac89-0a159fab7723", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "854d12fc-14bf-4010-8edb-f66b492fbeee", "record_id": "flaws_cloudtrail:0000542:854d12fc-14bf-4010-8edb-f66b492fbeee", "row_index": 542, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "854d12fc-14bf-4010-8edb-f66b492fbeee", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "741bac6f-0aba-40fc-9fee-fe3f864191a5", "record_id": "flaws_cloudtrail:0000543:741bac6f-0aba-40fc-9fee-fe3f864191a5", "row_index": 543, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA3BBKXR3B15UQOB30", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "741bac6f-0aba-40fc-9fee-fe3f864191a5", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA3BBKXR3B15UQOB30", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:10Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48cc782f-4c3b-4ef6-a92a-f1cb10670159", "record_id": "flaws_cloudtrail:0000544:48cc782f-4c3b-4ef6-a92a-f1cb10670159", "row_index": 544, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48cc782f-4c3b-4ef6-a92a-f1cb10670159", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8b4d40a-74cf-4c2a-be94-0017f7ac3c16", "record_id": "flaws_cloudtrail:0000545:d8b4d40a-74cf-4c2a-be94-0017f7ac3c16", "row_index": 545, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8b4d40a-74cf-4c2a-be94-0017f7ac3c16", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d784f58d-1e61-4cee-9e38-7a8e948c0fe6", "record_id": "flaws_cloudtrail:0000546:d784f58d-1e61-4cee-9e38-7a8e948c0fe6", "row_index": 546, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d784f58d-1e61-4cee-9e38-7a8e948c0fe6", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2531a309-8695-4c2d-af57-c8e4b5b5cd2a", "record_id": "flaws_cloudtrail:0000547:2531a309-8695-4c2d-af57-c8e4b5b5cd2a", "row_index": 547, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2531a309-8695-4c2d-af57-c8e4b5b5cd2a", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb83f005-1b03-4e13-8b7c-535d2ee147a3", "record_id": "flaws_cloudtrail:0000548:cb83f005-1b03-4e13-8b7c-535d2ee147a3", "row_index": 548, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb83f005-1b03-4e13-8b7c-535d2ee147a3", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e203f44b-870a-4452-9b1f-be11c1c274ed", "record_id": "flaws_cloudtrail:0000549:e203f44b-870a-4452-9b1f-be11c1c274ed", "row_index": 549, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e203f44b-870a-4452-9b1f-be11c1c274ed", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "959eddec-4148-4929-bfb0-066c713ac090", "record_id": "flaws_cloudtrail:0000550:959eddec-4148-4929-bfb0-066c713ac090", "row_index": 550, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "959eddec-4148-4929-bfb0-066c713ac090", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2dfe2e8f-ed15-476e-9a16-662c78edb4b1", "record_id": "flaws_cloudtrail:0000551:2dfe2e8f-ed15-476e-9a16-662c78edb4b1", "row_index": 551, "timestamp": "2018-06-21T22:46:10Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2dfe2e8f-ed15-476e-9a16-662c78edb4b1", "eventTime": "2018-06-21T22:46:10Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9f91c192-c7c1-4e57-acbc-4dbb02e9da3d", "record_id": "flaws_cloudtrail:0000552:9f91c192-c7c1-4e57-acbc-4dbb02e9da3d", "row_index": 552, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9f91c192-c7c1-4e57-acbc-4dbb02e9da3d", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd8b718-011c-4eb5-b0e0-e34eda3ed2a0", "record_id": "flaws_cloudtrail:0000553:1bd8b718-011c-4eb5-b0e0-e34eda3ed2a0", "row_index": 553, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAS5KZIWDEGGE07OED", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd8b718-011c-4eb5-b0e0-e34eda3ed2a0", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAS5KZIWDEGGE07OED", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:08Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1f4ff4b-fcc5-450c-a524-81bdbb348d83", "record_id": "flaws_cloudtrail:0000554:d1f4ff4b-fcc5-450c-a524-81bdbb348d83", "row_index": 554, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1f4ff4b-fcc5-450c-a524-81bdbb348d83", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e30945d1-5ad3-4079-925c-5436b61ab146", "record_id": "flaws_cloudtrail:0000555:e30945d1-5ad3-4079-925c-5436b61ab146", "row_index": 555, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e30945d1-5ad3-4079-925c-5436b61ab146", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cb223e4e-5948-4e59-9a74-a43963d205", "record_id": "flaws_cloudtrail:0000556:cb223e4e-5948-4e59-9a74-a43963d205", "row_index": 556, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cb223e4e-5948-4e59-9a74-a43963d205", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d8a87955-190b-4d32-8bf7-0fdbbf7fe954", "record_id": "flaws_cloudtrail:0000557:d8a87955-190b-4d32-8bf7-0fdbbf7fe954", "row_index": 557, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAQ2NRAPK5Y1Z77FXU", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d8a87955-190b-4d32-8bf7-0fdbbf7fe954", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAQ2NRAPK5Y1Z77FXU", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:10Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "094db5b7-8be7-4b89-92b8-70b58a7f709c", "record_id": "flaws_cloudtrail:0000558:094db5b7-8be7-4b89-92b8-70b58a7f709c", "row_index": 558, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "094db5b7-8be7-4b89-92b8-70b58a7f709c", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d108983e-546e-4738-9b73-9eeb6e478a08", "record_id": "flaws_cloudtrail:0000559:d108983e-546e-4738-9b73-9eeb6e478a08", "row_index": 559, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d108983e-546e-4738-9b73-9eeb6e478a08", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c182347-ae74-4389-8c9c-d7538b288e19", "record_id": "flaws_cloudtrail:0000560:c182347-ae74-4389-8c9c-d7538b288e19", "row_index": 560, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c182347-ae74-4389-8c9c-d7538b288e19", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38482-85b1-4ba8-a958-6acbaf0b3241", "record_id": "flaws_cloudtrail:0000561:38482-85b1-4ba8-a958-6acbaf0b3241", "row_index": 561, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38482-85b1-4ba8-a958-6acbaf0b3241", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61e6bb0e-8591-47e2-8bd2-e21981e00", "record_id": "flaws_cloudtrail:0000562:61e6bb0e-8591-47e2-8bd2-e21981e00", "row_index": 562, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61e6bb0e-8591-47e2-8bd2-e21981e00", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4097b602-284d-4a9b-aad7-95489c3786f4", "record_id": "flaws_cloudtrail:0000563:4097b602-284d-4a9b-aad7-95489c3786f4", "row_index": 563, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4097b602-284d-4a9b-aad7-95489c3786f4", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6a069fc-05ad-4ac6-8af0-c6d376aa2250", "record_id": "flaws_cloudtrail:0000564:c6a069fc-05ad-4ac6-8af0-c6d376aa2250", "row_index": 564, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6a069fc-05ad-4ac6-8af0-c6d376aa2250", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6c156b4a-da03-4711-ab17-f74b1e7c45e4", "record_id": "flaws_cloudtrail:0000565:6c156b4a-da03-4711-ab17-f74b1e7c45e4", "row_index": 565, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6c156b4a-da03-4711-ab17-f74b1e7c45e4", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13e130ad-6e31-4f07-8bde-665518d6c896", "record_id": "flaws_cloudtrail:0000566:13e130ad-6e31-4f07-8bde-665518d6c896", "row_index": 566, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13e130ad-6e31-4f07-8bde-665518d6c896", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "620ad4b1-7dd1-44d3-bbb0-29bdd684ffc3", "record_id": "flaws_cloudtrail:0000567:620ad4b1-7dd1-44d3-bbb0-29bdd684ffc3", "row_index": 567, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 710, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "620ad4b1-7dd1-44d3-bbb0-29bdd684ffc3", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8e24901-f0c8-436b-b78d-38aacc8942e7", "record_id": "flaws_cloudtrail:0000568:e8e24901-f0c8-436b-b78d-38aacc8942e7", "row_index": 568, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeSubnets", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8e24901-f0c8-436b-b78d-38aacc8942e7", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeSubnets", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"subnetSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a33083-0589-4776-862d-60cbaae7c107", "record_id": "flaws_cloudtrail:0000569:a33083-0589-4776-862d-60cbaae7c107", "row_index": 569, "timestamp": "2018-06-21T22:46:11Z", "event_type": "DescribeRouteTables", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a33083-0589-4776-862d-60cbaae7c107", "eventTime": "2018-06-21T22:46:11Z", "eventName": "DescribeRouteTables", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"routeTableIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f744c0da-9e3e-4b66-8c42-dd95d16634", "record_id": "flaws_cloudtrail:0000570:f744c0da-9e3e-4b66-8c42-dd95d16634", "row_index": 570, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f744c0da-9e3e-4b66-8c42-dd95d16634", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "675977f1-2084-4ab2-9475-d97338e3c055", "record_id": "flaws_cloudtrail:0000571:675977f1-2084-4ab2-9475-d97338e3c055", "row_index": 571, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "675977f1-2084-4ab2-9475-d97338e3c055", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfe40a44-398e-4c62-845d-7bc6196a154f", "record_id": "flaws_cloudtrail:0000572:cfe40a44-398e-4c62-845d-7bc6196a154f", "row_index": 572, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfe40a44-398e-4c62-845d-7bc6196a154f", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a8003a87-fac3-4079-a890-804d536f3d6b", "record_id": "flaws_cloudtrail:0000573:a8003a87-fac3-4079-a890-804d536f3d6b", "row_index": 573, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIANVG34TJWM4PYU8UB", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a8003a87-fac3-4079-a890-804d536f3d6b", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIANVG34TJWM4PYU8UB", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:10Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ceb23ba-e0f5-4ef7-b3a3-cf83c5c013ed", "record_id": "flaws_cloudtrail:0000574:8ceb23ba-e0f5-4ef7-b3a3-cf83c5c013ed", "row_index": 574, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ceb23ba-e0f5-4ef7-b3a3-cf83c5c013ed", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fd62d2c7-7f64-4be4-84a2-ce28fbad1cab", "record_id": "flaws_cloudtrail:0000575:fd62d2c7-7f64-4be4-84a2-ce28fbad1cab", "row_index": 575, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fd62d2c7-7f64-4be4-84a2-ce28fbad1cab", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5f88ac62-25a5-4cf0-8d29-b7ea21b47080", "record_id": "flaws_cloudtrail:0000576:5f88ac62-25a5-4cf0-8d29-b7ea21b47080", "row_index": 576, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5f88ac62-25a5-4cf0-8d29-b7ea21b47080", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4dd7aca3-a340-472c-889e-58d504d0a861", "record_id": "flaws_cloudtrail:0000577:4dd7aca3-a340-472c-889e-58d504d0a861", "row_index": 577, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4dd7aca3-a340-472c-889e-58d504d0a861", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8eed247d-2df9-44d9-83c5-6a11d1ab62b1", "record_id": "flaws_cloudtrail:0000578:8eed247d-2df9-44d9-83c5-6a11d1ab62b1", "row_index": 578, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAT8AI1FFSJFXCW2IZ", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8eed247d-2df9-44d9-83c5-6a11d1ab62b1", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAT8AI1FFSJFXCW2IZ", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:45:59Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e55ef390-c0e0-409f-9125-269dbd460aba", "record_id": "flaws_cloudtrail:0000579:e55ef390-c0e0-409f-9125-269dbd460aba", "row_index": 579, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e55ef390-c0e0-409f-9125-269dbd460aba", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "51c7d8b3-4144-4fdc-b2d2-784735ff367827", "record_id": "flaws_cloudtrail:0000580:51c7d8b3-4144-4fdc-b2d2-784735ff367827", "row_index": 580, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "51c7d8b3-4144-4fdc-b2d2-784735ff367827", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97d13907-5f42-42fa-9d22-6add19538c59", "record_id": "flaws_cloudtrail:0000581:97d13907-5f42-42fa-9d22-6add19538c59", "row_index": 581, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97d13907-5f42-42fa-9d22-6add19538c59", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b407df98-147c-44a6-a5dc-c188217b7273", "record_id": "flaws_cloudtrail:0000582:b407df98-147c-44a6-a5dc-c188217b7273", "row_index": 582, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b407df98-147c-44a6-a5dc-c188217b7273", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f7ef6ba-19af-42c8-ace9-439dd783448", "record_id": "flaws_cloudtrail:0000583:0f7ef6ba-19af-42c8-ace9-439dd783448", "row_index": 583, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeCustomerGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f7ef6ba-19af-42c8-ace9-439dd783448", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeCustomerGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"customerGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ceb89df0-10b4-4907-8c33-8ffc332f117b", "record_id": "flaws_cloudtrail:0000584:ceb89df0-10b4-4907-8c33-8ffc332f117b", "row_index": 584, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ceb89df0-10b4-4907-8c33-8ffc332f117b", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5a1bae9-43b2-419d-b5eb-119030694573", "record_id": "flaws_cloudtrail:0000585:e5a1bae9-43b2-419d-b5eb-119030694573", "row_index": 585, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeVpcs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5a1bae9-43b2-419d-b5eb-119030694573", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeVpcs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6db4067-3821-4382-bd4b-bafa95117592", "record_id": "flaws_cloudtrail:0000586:f6db4067-3821-4382-bd4b-bafa95117592", "row_index": 586, "timestamp": "2018-06-21T22:46:12Z", "event_type": "DescribeVpnGateways", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6db4067-3821-4382-bd4b-bafa95117592", "eventTime": "2018-06-21T22:46:12Z", "eventName": "DescribeVpnGateways", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnGatewaySet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ca5d5931-36df-490b-89df-706389c56af9", "record_id": "flaws_cloudtrail:0000587:ca5d5931-36df-490b-89df-706389c56af9", "row_index": 587, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeNetworkAcls", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ca5d5931-36df-490b-89df-706389c56af9", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeNetworkAcls", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkAclIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "230f3c62-0e83-47f8-88c2-ab1eaf141fb6", "record_id": "flaws_cloudtrail:0000588:230f3c62-0e83-47f8-88c2-ab1eaf141fb6", "row_index": 588, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "230f3c62-0e83-47f8-88c2-ab1eaf141fb6", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "333723a5-d2a3-4480-acc3-cff8e74257", "record_id": "flaws_cloudtrail:0000589:333723a5-d2a3-4480-acc3-cff8e74257", "row_index": 589, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "333723a5-d2a3-4480-acc3-cff8e74257", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21119-afb2-4592-a752-a4b6ba1baf49", "record_id": "flaws_cloudtrail:0000590:21119-afb2-4592-a752-a4b6ba1baf49", "row_index": 590, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIA630QMOMZG6HTFIH7", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21119-afb2-4592-a752-a4b6ba1baf49", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIA630QMOMZG6HTFIH7", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:13Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "144084c61-6575-4c10-9043-f59578d78df8", "record_id": "flaws_cloudtrail:0000591:144084c61-6575-4c10-9043-f59578d78df8", "row_index": 591, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 735, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "144084c61-6575-4c10-9043-f59578d78df8", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d64bbeb5-4b85-4a64-9ee4-399423b0f5b88", "record_id": "flaws_cloudtrail:0000592:d64bbeb5-4b85-4a64-9ee4-399423b0f5b88", "row_index": 592, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d64bbeb5-4b85-4a64-9ee4-399423b0f5b88", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4721edaf-557a-483e-b8b7-97a652638", "record_id": "flaws_cloudtrail:0000593:4721edaf-557a-483e-b8b7-97a652638", "row_index": 593, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4721edaf-557a-483e-b8b7-97a652638", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "421c7219-dda1-4b0b-8b1c-901331a22953", "record_id": "flaws_cloudtrail:0000594:421c7219-dda1-4b0b-8b1c-901331a22953", "row_index": 594, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "421c7219-dda1-4b0b-8b1c-901331a22953", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1d016de-2f5c-4c63-83a6-69b350343e", "record_id": "flaws_cloudtrail:0000595:f1d016de-2f5c-4c63-83a6-69b350343e", "row_index": 595, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeVpnConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1d016de-2f5c-4c63-83a6-69b350343e", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeVpnConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpnConnectionSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d54faffc-b376-4908-b4f9-b85b5c940d66", "record_id": "flaws_cloudtrail:0000596:d54faffc-b376-4908-b4f9-b85b5c940d66", "row_index": 596, "timestamp": "2018-06-21T22:46:13Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIATQ83SA6TJ7S2GH38", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 813, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d54faffc-b376-4908-b4f9-b85b5c940d66", "eventTime": "2018-06-21T22:46:13Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIATQ83SA6TJ7S2GH38", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:46:11Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e6543c2-a4f2-4404-bf55-a1a3cea6b881", "record_id": "flaws_cloudtrail:0000597:2e6543c2-a4f2-4404-bf55-a1a3cea6b881", "row_index": 597, "timestamp": "2018-06-21T22:46:14Z", "event_type": "DescribeFlowLogs", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "ASIAE6VCPK43HZ3OFHQS", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "ec2-frontend-api.amazonaws.com", "user_agent": "ec2-frontend-api.amazonaws.com", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 812, "raw_record_depth": 4, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e6543c2-a4f2-4404-bf55-a1a3cea6b881", "eventTime": "2018-06-21T22:46:14Z", "eventName": "DescribeFlowLogs", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "ec2-frontend-api.amazonaws.com", "userAgent": "ec2-frontend-api.amazonaws.com", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "ASIAE6VCPK43HZ3OFHQS", "userName": "Level6", "sessionContext": {"attributes": {"mfaAuthenticated": "false", "creationDate": "2018-06-21T22:45:58Z"}}, "invokedBy": "ec2-frontend-api.amazonaws.com"}, "responseElements": {"flowLogSet": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec08f52f-6b2a-4cc5-8472-7fe334c56d9d", "record_id": "flaws_cloudtrail:0000598:ec08f52f-6b2a-4cc5-8472-7fe334c56d9d", "row_index": 598, "timestamp": "2018-06-21T22:46:14Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec08f52f-6b2a-4cc5-8472-7fe334c56d9d", "eventTime": "2018-06-21T22:46:14Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "193798-57d5-4000-944c-43bb02f53c76", "record_id": "flaws_cloudtrail:0000599:193798-57d5-4000-944c-43bb02f53c76", "row_index": 599, "timestamp": "2018-06-21T22:46:16Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "193798-57d5-4000-944c-43bb02f53c76", "eventTime": "2018-06-21T22:46:16Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97dee8d3-3bf7-46b9-8501-868518f529a6a", "record_id": "flaws_cloudtrail:0000600:97dee8d3-3bf7-46b9-8501-868518f529a6a", "row_index": 600, "timestamp": "2018-06-21T22:46:16Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97dee8d3-3bf7-46b9-8501-868518f529a6a", "eventTime": "2018-06-21T22:46:16Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f32f7374-bea4-43fc-b56b-b6260f5e9c12", "record_id": "flaws_cloudtrail:0000601:f32f7374-bea4-43fc-b56b-b6260f5e9c12", "row_index": 601, "timestamp": "2018-06-21T22:46:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f32f7374-bea4-43fc-b56b-b6260f5e9c12", "eventTime": "2018-06-21T22:46:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e177f0d-9768-461c-8f4f-1a6fb4dee9ba", "record_id": "flaws_cloudtrail:0000602:5e177f0d-9768-461c-8f4f-1a6fb4dee9ba", "row_index": 602, "timestamp": "2018-06-21T22:46:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e177f0d-9768-461c-8f4f-1a6fb4dee9ba", "eventTime": "2018-06-21T22:46:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "faa75d3b-01c6-4ea3-8963-f7f58c9d3ba4", "record_id": "flaws_cloudtrail:0000603:faa75d3b-01c6-4ea3-8963-f7f58c9d3ba4", "row_index": 603, "timestamp": "2018-06-21T22:46:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "faa75d3b-01c6-4ea3-8963-f7f58c9d3ba4", "eventTime": "2018-06-21T22:46:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "893438a8-13ed-4b69-91d9-f8a72aed0c56", "record_id": "flaws_cloudtrail:0000604:893438a8-13ed-4b69-91d9-f8a72aed0c56", "row_index": 604, "timestamp": "2018-06-21T22:46:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "893438a8-13ed-4b69-91d9-f8a72aed0c56", "eventTime": "2018-06-21T22:46:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82eb8f39-89bb-4957-bd32-412e2b5abc86", "record_id": "flaws_cloudtrail:0000605:82eb8f39-89bb-4957-bd32-412e2b5abc86", "row_index": 605, "timestamp": "2018-06-21T22:46:17Z", "event_type": "ListClusters", "event_source": "elasticmapreduce.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "148.2.201.164", "user_agent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82eb8f39-89bb-4957-bd32-412e2b5abc86", "eventTime": "2018-06-21T22:46:17Z", "eventName": "ListClusters", "eventSource": "elasticmapreduce.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "148.2.201.164", "userAgent": "Boto3/1.7.42 Python/2.7.15rc1 Linux/4.14.0-kali3-amd64 Botocore/1.10.42", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}