Task: attack_reconstruction (flaws_cloudtrail)
Prompt: An IAM principal appears to confirm who they are, survey the account’s audit-trail configuration, and then take action to reduce CloudTrail visibility. Identify the responsible principal, the applicable MITRE ATT&CK technique, the supporting CloudTrail record_ids for each phase of the chain, and the impacted AWS assets. Return a JSON object matching the AttackReconstructionAnswer schema. Use principal.arn for primary_actor, the MITRE ATT&CK ID (e.g. T1530) for technique, and group the supporting CloudTrail record_ids by attack phase. List the AWS asset identifiers (bucket names, role/user names, trail names, ARNs) the attack acted on as impacted_assets.
Answer schema: attack_reconstruction_answer

CloudTrail records:
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "283d4bc9-8232-4bdd-a4b6-3934bd134c48", "record_id": "flaws_cloudtrail:0000000:283d4bc9-8232-4bdd-a4b6-3934bd134c48", "row_index": 0, "timestamp": "2018-12-25T20:44:06Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "283d4bc9-8232-4bdd-a4b6-3934bd134c48", "eventTime": "2018-12-25T20:44:06Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20e926a2-c27e-42a6-8847-e610f3560d63", "record_id": "flaws_cloudtrail:0000001:20e926a2-c27e-42a6-8847-e610f3560d63", "row_index": 1, "timestamp": "2018-12-25T20:44:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20e926a2-c27e-42a6-8847-e610f3560d63", "eventTime": "2018-12-25T20:44:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "340ab362-8d1b-4e5c-b64c-10e3179a40a4", "record_id": "flaws_cloudtrail:0000002:340ab362-8d1b-4e5c-b64c-10e3179a40a4", "row_index": 2, "timestamp": "2018-12-25T20:44:10Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "340ab362-8d1b-4e5c-b64c-10e3179a40a4", "eventTime": "2018-12-25T20:44:10Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0f50442-18e7-4347-826c-7d7e8c2d524f", "record_id": "flaws_cloudtrail:0000003:c0f50442-18e7-4347-826c-7d7e8c2d524f", "row_index": 3, "timestamp": "2018-12-25T20:44:11Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0f50442-18e7-4347-826c-7d7e8c2d524f", "eventTime": "2018-12-25T20:44:11Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6020f33-057c-4b78-8d7d-f5df18b995dc", "record_id": "flaws_cloudtrail:0000004:f6020f33-057c-4b78-8d7d-f5df18b995dc", "row_index": 4, "timestamp": "2018-12-25T20:44:12Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6020f33-057c-4b78-8d7d-f5df18b995dc", "eventTime": "2018-12-25T20:44:12Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9caf50f6-5dc8-44b1-b514-2ab3bf8b5094", "record_id": "flaws_cloudtrail:0000005:9caf50f6-5dc8-44b1-b514-2ab3bf8b5094", "row_index": 5, "timestamp": "2018-12-25T20:44:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9caf50f6-5dc8-44b1-b514-2ab3bf8b5094", "eventTime": "2018-12-25T20:44:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d34c71b-3fc6-47ba-ae16-3f386ce50dbd", "record_id": "flaws_cloudtrail:0000006:6d34c71b-3fc6-47ba-ae16-3f386ce50dbd", "row_index": 6, "timestamp": "2018-12-25T20:44:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d34c71b-3fc6-47ba-ae16-3f386ce50dbd", "eventTime": "2018-12-25T20:44:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3e883516-aeba-42d3-b926-28276b9d", "record_id": "flaws_cloudtrail:0000007:3e883516-aeba-42d3-b926-28276b9d", "row_index": 7, "timestamp": "2018-12-25T20:44:17Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3e883516-aeba-42d3-b926-28276b9d", "eventTime": "2018-12-25T20:44:17Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f8977ce0-9bc3-4a6d-b246-72a174e55d9d", "record_id": "flaws_cloudtrail:0000008:f8977ce0-9bc3-4a6d-b246-72a174e55d9d", "row_index": 8, "timestamp": "2018-12-25T20:44:18Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f8977ce0-9bc3-4a6d-b246-72a174e55d9d", "eventTime": "2018-12-25T20:44:18Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc9cbaee-316a-4154-83b7-eca78b3681c4", "record_id": "flaws_cloudtrail:0000009:bc9cbaee-316a-4154-83b7-eca78b3681c4", "row_index": 9, "timestamp": "2018-12-25T20:44:19Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc9cbaee-316a-4154-83b7-eca78b3681c4", "eventTime": "2018-12-25T20:44:19Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d56666f-eadf-47ca-9c59-332e32c6ebfd", "record_id": "flaws_cloudtrail:0000010:9d56666f-eadf-47ca-9c59-332e32c6ebfd", "row_index": 10, "timestamp": "2018-12-25T20:44:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d56666f-eadf-47ca-9c59-332e32c6ebfd", "eventTime": "2018-12-25T20:44:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dd03ed05-fb57-4c6c-866c-f6536090287a", "record_id": "flaws_cloudtrail:0000011:dd03ed05-fb57-4c6c-866c-f6536090287a", "row_index": 11, "timestamp": "2018-12-25T20:44:22Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dd03ed05-fb57-4c6c-866c-f6536090287a", "eventTime": "2018-12-25T20:44:22Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f8f415e-954e-4ab3-9660-9bfc6c4bcc5f", "record_id": "flaws_cloudtrail:0000012:4f8f415e-954e-4ab3-9660-9bfc6c4bcc5f", "row_index": 12, "timestamp": "2018-12-25T20:44:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f8f415e-954e-4ab3-9660-9bfc6c4bcc5f", "eventTime": "2018-12-25T20:44:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4bd0ccc-1de9-4c57-b12d-77c91e5d823f", "record_id": "flaws_cloudtrail:0000013:a4bd0ccc-1de9-4c57-b12d-77c91e5d823f", "row_index": 13, "timestamp": "2018-12-25T20:44:24Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4bd0ccc-1de9-4c57-b12d-77c91e5d823f", "eventTime": "2018-12-25T20:44:24Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "526edb79-e90d-454a-95d8-3081a8e07df6", "record_id": "flaws_cloudtrail:0000014:526edb79-e90d-454a-95d8-3081a8e07df6", "row_index": 14, "timestamp": "2018-12-25T20:44:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "526edb79-e90d-454a-95d8-3081a8e07df6", "eventTime": "2018-12-25T20:44:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "614e8d7c-d51e-4abf-974f-ad38b3101a11", "record_id": "flaws_cloudtrail:0000015:614e8d7c-d51e-4abf-974f-ad38b3101a11", "row_index": 15, "timestamp": "2018-12-25T20:44:25Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "614e8d7c-d51e-4abf-974f-ad38b3101a11", "eventTime": "2018-12-25T20:44:25Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a55e7e60-cad8-48dc-a7f9-d254f47ff125", "record_id": "flaws_cloudtrail:0000016:a55e7e60-cad8-48dc-a7f9-d254f47ff125", "row_index": 16, "timestamp": "2018-12-25T20:44:26Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a55e7e60-cad8-48dc-a7f9-d254f47ff125", "eventTime": "2018-12-25T20:44:26Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "768a79a5-fcc8-4482-9f79-bba0d1fb76b9", "record_id": "flaws_cloudtrail:0000017:768a79a5-fcc8-4482-9f79-bba0d1fb76b9", "row_index": 17, "timestamp": "2018-12-25T20:44:28Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "768a79a5-fcc8-4482-9f79-bba0d1fb76b9", "eventTime": "2018-12-25T20:44:28Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "336c814f-702a-4ffb-9265-f6fc61ccb2f2", "record_id": "flaws_cloudtrail:0000018:336c814f-702a-4ffb-9265-f6fc61ccb2f2", "row_index": 18, "timestamp": "2018-12-25T20:44:29Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "336c814f-702a-4ffb-9265-f6fc61ccb2f2", "eventTime": "2018-12-25T20:44:29Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af6c5d55-67e6-47a7-967b-1842e9c6fdea", "record_id": "flaws_cloudtrail:0000019:af6c5d55-67e6-47a7-967b-1842e9c6fdea", "row_index": 19, "timestamp": "2018-12-25T20:44:31Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af6c5d55-67e6-47a7-967b-1842e9c6fdea", "eventTime": "2018-12-25T20:44:31Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fcc3a80-6f4d-4950-b018-b9fe3b5c2e8c", "record_id": "flaws_cloudtrail:0000020:5fcc3a80-6f4d-4950-b018-b9fe3b5c2e8c", "row_index": 20, "timestamp": "2018-12-25T20:44:32Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 748, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fcc3a80-6f4d-4950-b018-b9fe3b5c2e8c", "eventTime": "2018-12-25T20:44:32Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50fa499f-e2e3-4510-b207-a7fc2d7030d0", "record_id": "flaws_cloudtrail:0000021:50fa499f-e2e3-4510-b207-a7fc2d7030d0", "row_index": 21, "timestamp": "2018-12-25T20:44:34Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50fa499f-e2e3-4510-b207-a7fc2d7030d0", "eventTime": "2018-12-25T20:44:34Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c0c546945-9a83-423f-a453-07d01446d91b", "record_id": "flaws_cloudtrail:0000022:c0c546945-9a83-423f-a453-07d01446d91b", "row_index": 22, "timestamp": "2018-12-25T20:44:36Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c0c546945-9a83-423f-a453-07d01446d91b", "eventTime": "2018-12-25T20:44:36Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b613c31c-1024-464d-a48f-66ce3c682088", "record_id": "flaws_cloudtrail:0000023:b613c31c-1024-464d-a48f-66ce3c682088", "row_index": 23, "timestamp": "2018-12-25T20:44:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b613c31c-1024-464d-a48f-66ce3c682088", "eventTime": "2018-12-25T20:44:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f6c61618-13f6-477e-b0c5-7cc4ef03fdd7", "record_id": "flaws_cloudtrail:0000024:f6c61618-13f6-477e-b0c5-7cc4ef03fdd7", "row_index": 24, "timestamp": "2018-12-25T20:44:38Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f6c61618-13f6-477e-b0c5-7cc4ef03fdd7", "eventTime": "2018-12-25T20:44:38Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f27493-b8e1-4045-b6c9-9480f382f1f7", "record_id": "flaws_cloudtrail:0000025:8f27493-b8e1-4045-b6c9-9480f382f1f7", "row_index": 25, "timestamp": "2018-12-25T20:44:39Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f27493-b8e1-4045-b6c9-9480f382f1f7", "eventTime": "2018-12-25T20:44:39Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc24c1e6-f714-45a9-bffa-2b720d04fbfd", "record_id": "flaws_cloudtrail:0000026:bc24c1e6-f714-45a9-bffa-2b720d04fbfd", "row_index": 26, "timestamp": "2018-12-25T20:44:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc24c1e6-f714-45a9-bffa-2b720d04fbfd", "eventTime": "2018-12-25T20:44:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9921d06b-5649-41d2-8142-716498d95e17", "record_id": "flaws_cloudtrail:0000027:9921d06b-5649-41d2-8142-716498d95e17", "row_index": 27, "timestamp": "2018-12-25T20:44:42Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9921d06b-5649-41d2-8142-716498d95e17", "eventTime": "2018-12-25T20:44:42Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "28be34a3-4a59-42ca-8b82-72dab575b724", "record_id": "flaws_cloudtrail:0000028:28be34a3-4a59-42ca-8b82-72dab575b724", "row_index": 28, "timestamp": "2018-12-25T20:44:43Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "28be34a3-4a59-42ca-8b82-72dab575b724", "eventTime": "2018-12-25T20:44:43Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6705df75-e01a-4123-a4f6-1417b9251cf3", "record_id": "flaws_cloudtrail:0000029:6705df75-e01a-4123-a4f6-1417b9251cf3", "row_index": 29, "timestamp": "2018-12-25T20:44:43Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6705df75-e01a-4123-a4f6-1417b9251cf3", "eventTime": "2018-12-25T20:44:43Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "beed2d99-fd48-4e2e-b3f5-e462123c3ad7", "record_id": "flaws_cloudtrail:0000030:beed2d99-fd48-4e2e-b3f5-e462123c3ad7", "row_index": 30, "timestamp": "2018-12-25T20:44:44Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "beed2d99-fd48-4e2e-b3f5-e462123c3ad7", "eventTime": "2018-12-25T20:44:44Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c023f98f-4a92-447d-81e1-d0f795315fab0", "record_id": "flaws_cloudtrail:0000031:c023f98f-4a92-447d-81e1-d0f795315fab0", "row_index": 31, "timestamp": "2018-12-25T20:44:45Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 817, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c023f98f-4a92-447d-81e1-d0f795315fab0", "eventTime": "2018-12-25T20:44:45Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d42f2de-c70c-4cd4-81ad-fdce7fbe48cc", "record_id": "flaws_cloudtrail:0000032:7d42f2de-c70c-4cd4-81ad-fdce7fbe48cc", "row_index": 32, "timestamp": "2018-12-25T20:44:46Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d42f2de-c70c-4cd4-81ad-fdce7fbe48cc", "eventTime": "2018-12-25T20:44:46Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8cf6d8f0-8ba6-46c8-8846-99d17860e7", "record_id": "flaws_cloudtrail:0000033:8cf6d8f0-8ba6-46c8-8846-99d17860e7", "row_index": 33, "timestamp": "2018-12-25T20:44:48Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8cf6d8f0-8ba6-46c8-8846-99d17860e7", "eventTime": "2018-12-25T20:44:48Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cca8296e-654a-459e-a9e0-c40b6fe91737", "record_id": "flaws_cloudtrail:0000034:cca8296e-654a-459e-a9e0-c40b6fe91737", "row_index": 34, "timestamp": "2018-12-25T20:44:49Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 824, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cca8296e-654a-459e-a9e0-c40b6fe91737", "eventTime": "2018-12-25T20:44:49Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63c6c2f3-0aaa-4372-a28d-0cec2bf36db1", "record_id": "flaws_cloudtrail:0000035:63c6c2f3-0aaa-4372-a28d-0cec2bf36db1", "row_index": 35, "timestamp": "2018-12-25T20:44:51Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 816, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63c6c2f3-0aaa-4372-a28d-0cec2bf36db1", "eventTime": "2018-12-25T20:44:51Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf212fcf-36db-49b9-ad0c-7354e6002745", "record_id": "flaws_cloudtrail:0000036:cf212fcf-36db-49b9-ad0c-7354e6002745", "row_index": 36, "timestamp": "2018-12-25T20:44:52Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 821, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf212fcf-36db-49b9-ad0c-7354e6002745", "eventTime": "2018-12-25T20:44:52Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe0f154c-e83e-4006-939d-bd1f7f2de521", "record_id": "flaws_cloudtrail:0000037:fe0f154c-e83e-4006-939d-bd1f7f2de521", "row_index": 37, "timestamp": "2018-12-25T20:44:54Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe0f154c-e83e-4006-939d-bd1f7f2de521", "eventTime": "2018-12-25T20:44:54Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2eeb72e2-29e4-46eb-9def-364d199c6c4f", "record_id": "flaws_cloudtrail:0000038:2eeb72e2-29e4-46eb-9def-364d199c6c4f", "row_index": 38, "timestamp": "2018-12-25T20:44:54Z", "event_type": "GetCallerIdentity", "event_source": "sts.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAC82BFKLHI5UW4S2Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "133.44.33.176", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 529, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2eeb72e2-29e4-46eb-9def-364d199c6c4f", "eventTime": "2018-12-25T20:44:54Z", "eventName": "GetCallerIdentity", "eventSource": "sts.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "133.44.33.176", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAC82BFKLHI5UW4S2Q", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4fa0e256-fb21-47b5-a748-422465ed5f8f", "record_id": "flaws_cloudtrail:0000039:4fa0e256-fb21-47b5-a748-422465ed5f8f", "row_index": 39, "timestamp": "2018-12-25T20:44:56Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 823, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4fa0e256-fb21-47b5-a748-422465ed5f8f", "eventTime": "2018-12-25T20:44:56Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc342cef-599f-4167-b633-41e18865", "record_id": "flaws_cloudtrail:0000040:fc342cef-599f-4167-b633-41e18865", "row_index": 40, "timestamp": "2018-12-25T20:44:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 815, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc342cef-599f-4167-b633-41e18865", "eventTime": "2018-12-25T20:44:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0c1521c-ec6a-4870-8098-7f2a1f887cef", "record_id": "flaws_cloudtrail:0000041:e0c1521c-ec6a-4870-8098-7f2a1f887cef", "row_index": 41, "timestamp": "2018-12-25T20:44:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0c1521c-ec6a-4870-8098-7f2a1f887cef", "eventTime": "2018-12-25T20:44:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74beacf6-fb0c-4f72-94ea-6d0d896144b2", "record_id": "flaws_cloudtrail:0000042:74beacf6-fb0c-4f72-94ea-6d0d896144b2", "row_index": 42, "timestamp": "2018-12-25T20:44:59Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74beacf6-fb0c-4f72-94ea-6d0d896144b2", "eventTime": "2018-12-25T20:44:59Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fdbba837-21f3-473d-9b92-8c3a57c746873", "record_id": "flaws_cloudtrail:0000043:fdbba837-21f3-473d-9b92-8c3a57c746873", "row_index": 43, "timestamp": "2018-12-25T20:45:00Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 819, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fdbba837-21f3-473d-9b92-8c3a57c746873", "eventTime": "2018-12-25T20:45:00Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f2694c98-8839-4ae6-98b3-ab6596f04dad", "record_id": "flaws_cloudtrail:0000044:f2694c98-8839-4ae6-98b3-ab6596f04dad", "row_index": 44, "timestamp": "2018-12-25T20:45:02Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 818, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f2694c98-8839-4ae6-98b3-ab6596f04dad", "eventTime": "2018-12-25T20:45:02Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "group-name", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b208e3ac-4cc7-45c3-9556-51a9c052cb33", "record_id": "flaws_cloudtrail:0000045:b208e3ac-4cc7-45c3-9556-51a9c052cb33", "row_index": 45, "timestamp": "2018-12-25T20:45:03Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b208e3ac-4cc7-45c3-9556-51a9c052cb33", "eventTime": "2018-12-25T20:45:03Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b71adf5-2cf9-4e64-889d-61b8d32da77a", "record_id": "flaws_cloudtrail:0000046:6b71adf5-2cf9-4e64-889d-61b8d32da77a", "row_index": 46, "timestamp": "2018-12-25T20:45:04Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b71adf5-2cf9-4e64-889d-61b8d32da77a", "eventTime": "2018-12-25T20:45:04Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36994bda-f5ea-4880-8c3c-005ccccec72a", "record_id": "flaws_cloudtrail:0000047:36994bda-f5ea-4880-8c3c-005ccccec72a", "row_index": 47, "timestamp": "2018-12-25T20:45:05Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36994bda-f5ea-4880-8c3c-005ccccec72a", "eventTime": "2018-12-25T20:45:05Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4467feb6-3f43-4455-af5c-0788670d75b0", "record_id": "flaws_cloudtrail:0000048:4467feb6-3f43-4455-af5c-0788670d75b0", "row_index": 48, "timestamp": "2018-12-25T20:45:05Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4467feb6-3f43-4455-af5c-0788670d75b0", "eventTime": "2018-12-25T20:45:05Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "610b9fd0-f64b-49e2-8c9c-3af2f23e1d60", "record_id": "flaws_cloudtrail:0000049:610b9fd0-f64b-49e2-8c9c-3af2f23e1d60", "row_index": 49, "timestamp": "2018-12-25T20:45:06Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "610b9fd0-f64b-49e2-8c9c-3af2f23e1d60", "eventTime": "2018-12-25T20:45:06Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a48f4f2-1197-4cb6-ac25-4be46e071b16", "record_id": "flaws_cloudtrail:0000050:4a48f4f2-1197-4cb6-ac25-4be46e071b16", "row_index": 50, "timestamp": "2018-12-25T20:45:08Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a48f4f2-1197-4cb6-ac25-4be46e071b16", "eventTime": "2018-12-25T20:45:08Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9dafcf6b-c9fd-4271-a309-024b0a9186e0", "record_id": "flaws_cloudtrail:0000051:9dafcf6b-c9fd-4271-a309-024b0a9186e0", "row_index": 51, "timestamp": "2018-12-25T20:45:10Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9dafcf6b-c9fd-4271-a309-024b0a9186e0", "eventTime": "2018-12-25T20:45:10Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bd7a656-dae0-430a-a56a-c5081ce0cadd", "record_id": "flaws_cloudtrail:0000052:8bd7a656-dae0-430a-a56a-c5081ce0cadd", "row_index": 52, "timestamp": "2018-12-25T20:45:11Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bd7a656-dae0-430a-a56a-c5081ce0cadd", "eventTime": "2018-12-25T20:45:11Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd7e1f16-2c60-44da-8e72-c8595e7c9757", "record_id": "flaws_cloudtrail:0000053:cd7e1f16-2c60-44da-8e72-c8595e7c9757", "row_index": 53, "timestamp": "2018-12-25T20:45:12Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd7e1f16-2c60-44da-8e72-c8595e7c9757", "eventTime": "2018-12-25T20:45:12Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a51f7722-85e0-4eb5-a2e5-710fc152a1b0", "record_id": "flaws_cloudtrail:0000054:a51f7722-85e0-4eb5-a2e5-710fc152a1b0", "row_index": 54, "timestamp": "2018-12-25T20:45:14Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a51f7722-85e0-4eb5-a2e5-710fc152a1b0", "eventTime": "2018-12-25T20:45:14Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1fb4b632-e5b9-414f-99fd-c6a17fd8712d", "record_id": "flaws_cloudtrail:0000055:1fb4b632-e5b9-414f-99fd-c6a17fd8712d", "row_index": 55, "timestamp": "2018-12-25T20:45:16Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1fb4b632-e5b9-414f-99fd-c6a17fd8712d", "eventTime": "2018-12-25T20:45:16Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "730c90d6-46fa-41ba-bf7a-3130f7cfee01", "record_id": "flaws_cloudtrail:0000056:730c90d6-46fa-41ba-bf7a-3130f7cfee01", "row_index": 56, "timestamp": "2018-12-25T20:45:17Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "730c90d6-46fa-41ba-bf7a-3130f7cfee01", "eventTime": "2018-12-25T20:45:17Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02d947dd-c435-425c-945e-b604b11ffe26", "record_id": "flaws_cloudtrail:0000057:02d947dd-c435-425c-945e-b604b11ffe26", "row_index": 57, "timestamp": "2018-12-25T20:45:18Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02d947dd-c435-425c-945e-b604b11ffe26", "eventTime": "2018-12-25T20:45:18Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36362d5b-f2ab-449b-bb8c-b7f97fae30f2", "record_id": "flaws_cloudtrail:0000058:36362d5b-f2ab-449b-bb8c-b7f97fae30f2", "row_index": 58, "timestamp": "2018-12-25T20:45:19Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36362d5b-f2ab-449b-bb8c-b7f97fae30f2", "eventTime": "2018-12-25T20:45:19Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c79f708-10d0-4a83-8d72-fb80c246ff99", "record_id": "flaws_cloudtrail:0000059:5c79f708-10d0-4a83-8d72-fb80c246ff99", "row_index": 59, "timestamp": "2018-12-25T20:45:20Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c79f708-10d0-4a83-8d72-fb80c246ff99", "eventTime": "2018-12-25T20:45:20Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21ff0d77-229c-4b74-9c61-58b5e1d539704", "record_id": "flaws_cloudtrail:0000060:21ff0d77-229c-4b74-9c61-58b5e1d539704", "row_index": 60, "timestamp": "2018-12-25T20:45:22Z", "event_type": "DescribeVpcPeeringConnections", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21ff0d77-229c-4b74-9c61-58b5e1d539704", "eventTime": "2018-12-25T20:45:22Z", "eventName": "DescribeVpcPeeringConnections", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"vpcPeeringConnectionIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bbc40bf-ab7a-4ee7-9cd5-166a4842b104", "record_id": "flaws_cloudtrail:0000061:6bbc40bf-ab7a-4ee7-9cd5-166a4842b104", "row_index": 61, "timestamp": "2018-12-25T20:45:23Z", "event_type": "ListGroups", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bbc40bf-ab7a-4ee7-9cd5-166a4842b104", "eventTime": "2018-12-25T20:45:23Z", "eventName": "ListGroups", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a93be600-d24c-4730-a79d-459509703d37", "record_id": "flaws_cloudtrail:0000062:a93be600-d24c-4730-a79d-459509703d37", "row_index": 62, "timestamp": "2018-12-25T20:45:24Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a93be600-d24c-4730-a79d-459509703d37", "eventTime": "2018-12-25T20:45:24Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30f096a9-5025-4171-99f2-1f52b344a77e", "record_id": "flaws_cloudtrail:0000063:30f096a9-5025-4171-99f2-1f52b344a77e", "row_index": 63, "timestamp": "2018-12-25T20:45:25Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30f096a9-5025-4171-99f2-1f52b344a77e", "eventTime": "2018-12-25T20:45:25Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c23700b0-46ca-4670-8f5a-af85a1cf340a", "record_id": "flaws_cloudtrail:0000064:c23700b0-46ca-4670-8f5a-af85a1cf340a", "row_index": 64, "timestamp": "2018-12-25T20:45:26Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 798, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c23700b0-46ca-4670-8f5a-af85a1cf340a", "eventTime": "2018-12-25T20:45:26Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0d426e7-2a07-4731-bf48-797dbe4bad97", "record_id": "flaws_cloudtrail:0000065:f0d426e7-2a07-4731-bf48-797dbe4bad97", "row_index": 65, "timestamp": "2018-12-25T20:45:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0d426e7-2a07-4731-bf48-797dbe4bad97", "eventTime": "2018-12-25T20:45:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcbfa379-22bc-4062-871d-8b3c7049ddf1", "record_id": "flaws_cloudtrail:0000066:fcbfa379-22bc-4062-871d-8b3c7049ddf1", "row_index": 66, "timestamp": "2018-12-25T20:45:27Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcbfa379-22bc-4062-871d-8b3c7049ddf1", "eventTime": "2018-12-25T20:45:27Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "61c378903-b611-47c3-9a19-0073f10be4ed", "record_id": "flaws_cloudtrail:0000067:61c378903-b611-47c3-9a19-0073f10be4ed", "row_index": 67, "timestamp": "2018-12-25T20:45:29Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "61c378903-b611-47c3-9a19-0073f10be4ed", "eventTime": "2018-12-25T20:45:29Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7ca4142-16a9-4c37-acea-77449758b4cb", "record_id": "flaws_cloudtrail:0000068:d7ca4142-16a9-4c37-acea-77449758b4cb", "row_index": 68, "timestamp": "2018-12-25T20:45:31Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7ca4142-16a9-4c37-acea-77449758b4cb", "eventTime": "2018-12-25T20:45:31Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29689fa3-74e3-4f3a-b416-80c4e7973abc", "record_id": "flaws_cloudtrail:0000069:29689fa3-74e3-4f3a-b416-80c4e7973abc", "row_index": 69, "timestamp": "2018-12-25T20:45:33Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29689fa3-74e3-4f3a-b416-80c4e7973abc", "eventTime": "2018-12-25T20:45:33Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "34b19a3e-256f-4b21-8317-f3f5220f3076", "record_id": "flaws_cloudtrail:0000070:34b19a3e-256f-4b21-8317-f3f5220f3076", "row_index": 70, "timestamp": "2018-12-25T20:45:34Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "34b19a3e-256f-4b21-8317-f3f5220f3076", "eventTime": "2018-12-25T20:45:34Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d22f7604-8cf2-4cac-a4fd-a1d86a29ae6f", "record_id": "flaws_cloudtrail:0000071:d22f7604-8cf2-4cac-a4fd-a1d86a29ae6f", "row_index": 71, "timestamp": "2018-12-25T20:45:35Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d22f7604-8cf2-4cac-a4fd-a1d86a29ae6f", "eventTime": "2018-12-25T20:45:35Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9a0a5610-fca2-47db-862e-0862ef357df7", "record_id": "flaws_cloudtrail:0000072:9a0a5610-fca2-47db-862e-0862ef357df7", "row_index": 72, "timestamp": "2018-12-25T20:45:37Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9a0a5610-fca2-47db-862e-0862ef357df7", "eventTime": "2018-12-25T20:45:37Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "132f59fc-d625-4ecd-9728-70da36cdd2ad", "record_id": "flaws_cloudtrail:0000073:132f59fc-d625-4ecd-9728-70da36cdd2ad", "row_index": 73, "timestamp": "2018-12-25T20:45:38Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "132f59fc-d625-4ecd-9728-70da36cdd2ad", "eventTime": "2018-12-25T20:45:38Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21299c-8a4b-47fb-8b43-5af298af799a", "record_id": "flaws_cloudtrail:0000074:21299c-8a4b-47fb-8b43-5af298af799a", "row_index": 74, "timestamp": "2018-12-25T20:45:39Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 793, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21299c-8a4b-47fb-8b43-5af298af799a", "eventTime": "2018-12-25T20:45:39Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4caeb2b-96b0-466b-9b38-9c6611d075d1", "record_id": "flaws_cloudtrail:0000075:f4caeb2b-96b0-466b-9b38-9c6611d075d1", "row_index": 75, "timestamp": "2018-12-25T20:45:40Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4caeb2b-96b0-466b-9b38-9c6611d075d1", "eventTime": "2018-12-25T20:45:40Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d539bd97-0d4a-4d33-aace-866b2078c9d2", "record_id": "flaws_cloudtrail:0000076:d539bd97-0d4a-4d33-aace-866b2078c9d2", "row_index": 76, "timestamp": "2018-12-25T20:45:42Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d539bd97-0d4a-4d33-aace-866b2078c9d2", "eventTime": "2018-12-25T20:45:42Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bff32ef8-bd83-4b61-acab-4985b9245fc6", "record_id": "flaws_cloudtrail:0000077:bff32ef8-bd83-4b61-acab-4985b9245fc6", "row_index": 77, "timestamp": "2018-12-25T20:45:43Z", "event_type": "DescribeSnapshots", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 5, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bff32ef8-bd83-4b61-acab-4985b9245fc6", "eventTime": "2018-12-25T20:45:43Z", "eventName": "DescribeSnapshots", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "snapshotSet": {}, "ownersSet": {"items": [{"owner": "811596193553"}]}, "sharedUsersSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "85646c51-3b8e-4a8b-b890-91bbe0e48e4a", "record_id": "flaws_cloudtrail:0000078:85646c51-3b8e-4a8b-b890-91bbe0e48e4a", "row_index": 78, "timestamp": "2018-12-25T20:45:45Z", "event_type": "DescribeSnapshotAttribute", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 767, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "85646c51-3b8e-4a8b-b890-91bbe0e48e4a", "eventTime": "2018-12-25T20:45:45Z", "eventName": "DescribeSnapshotAttribute", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"snapshotId": "snap-83d15d668fb2941db", "attributeType": "CREATE_VOLUME_PERMISSION"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fc53d691-dd2c-448c-b525-cbde192c59d5", "record_id": "flaws_cloudtrail:0000079:fc53d691-dd2c-448c-b525-cbde192c59d5", "row_index": 79, "timestamp": "2018-12-25T20:45:46Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fc53d691-dd2c-448c-b525-cbde192c59d5", "eventTime": "2018-12-25T20:45:46Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c7064a08-3d87-4904-9251-a43ce8f5c996", "record_id": "flaws_cloudtrail:0000080:c7064a08-3d87-4904-9251-a43ce8f5c996", "row_index": 80, "timestamp": "2018-12-25T20:45:47Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c7064a08-3d87-4904-9251-a43ce8f5c996", "eventTime": "2018-12-25T20:45:47Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4be8717-6906-43d5-8af0-d5cc78adca18", "record_id": "flaws_cloudtrail:0000081:f4be8717-6906-43d5-8af0-d5cc78adca18", "row_index": 81, "timestamp": "2018-12-25T20:45:48Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4be8717-6906-43d5-8af0-d5cc78adca18", "eventTime": "2018-12-25T20:45:48Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bdc611c3-28d4-4a32-a1ec-57447752d427", "record_id": "flaws_cloudtrail:0000082:bdc611c3-28d4-4a32-a1ec-57447752d427", "row_index": 82, "timestamp": "2018-12-25T20:45:50Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bdc611c3-28d4-4a32-a1ec-57447752d427", "eventTime": "2018-12-25T20:45:50Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddc2f775-7c3f-4573-9a8c-c3907bc8f651", "record_id": "flaws_cloudtrail:0000083:ddc2f775-7c3f-4573-9a8c-c3907bc8f651", "row_index": 83, "timestamp": "2018-12-25T20:45:51Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddc2f775-7c3f-4573-9a8c-c3907bc8f651", "eventTime": "2018-12-25T20:45:51Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "241509c-47c3-475c-9734-a996b511cf6b", "record_id": "flaws_cloudtrail:0000084:241509c-47c3-475c-9734-a996b511cf6b", "row_index": 84, "timestamp": "2018-12-25T20:45:52Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "241509c-47c3-475c-9734-a996b511cf6b", "eventTime": "2018-12-25T20:45:52Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "37f48b3a-743f-4d5c-87f0-c0d726913cb17", "record_id": "flaws_cloudtrail:0000085:37f48b3a-743f-4d5c-87f0-c0d726913cb17", "row_index": 85, "timestamp": "2018-12-25T20:45:54Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 705, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "37f48b3a-743f-4d5c-87f0-c0d726913cb17", "eventTime": "2018-12-25T20:45:54Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "17238ba-db21-412f-aa43-455d310bb363", "record_id": "flaws_cloudtrail:0000086:17238ba-db21-412f-aa43-455d310bb363", "row_index": 86, "timestamp": "2018-12-25T20:45:55Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "17238ba-db21-412f-aa43-455d310bb363", "eventTime": "2018-12-25T20:45:55Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fde9a482-27d3-4ace-89cd-13586dd7ed26", "record_id": "flaws_cloudtrail:0000087:fde9a482-27d3-4ace-89cd-13586dd7ed26", "row_index": 87, "timestamp": "2018-12-25T20:45:56Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 796, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fde9a482-27d3-4ace-89cd-13586dd7ed26", "eventTime": "2018-12-25T20:45:56Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ae4c5e6-ee4f-464b-8a45-d1d8244d58eb", "record_id": "flaws_cloudtrail:0000088:0ae4c5e6-ee4f-464b-8a45-d1d8244d58eb", "row_index": 88, "timestamp": "2018-12-25T20:45:58Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ae4c5e6-ee4f-464b-8a45-d1d8244d58eb", "eventTime": "2018-12-25T20:45:58Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "539b7070-06cd-4870-a93f-783259c65ff2", "record_id": "flaws_cloudtrail:0000089:539b7070-06cd-4870-a93f-783259c65ff2", "row_index": 89, "timestamp": "2018-12-25T20:45:59Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "539b7070-06cd-4870-a93f-783259c65ff2", "eventTime": "2018-12-25T20:45:59Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "915d85d2-1ba2-4267-88fb-5fcbd537ff93", "record_id": "flaws_cloudtrail:0000090:915d85d2-1ba2-4267-88fb-5fcbd537ff93", "row_index": 90, "timestamp": "2018-12-25T20:46:00Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "915d85d2-1ba2-4267-88fb-5fcbd537ff93", "eventTime": "2018-12-25T20:46:00Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a6c8a02a-9724-4c56-a560-12b63877cfe3", "record_id": "flaws_cloudtrail:0000091:a6c8a02a-9724-4c56-a560-12b63877cfe3", "row_index": 91, "timestamp": "2018-12-25T20:46:02Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a6c8a02a-9724-4c56-a560-12b63877cfe3", "eventTime": "2018-12-25T20:46:02Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62671b8d-6312-4f08-a531-e0ec0edb11ae", "record_id": "flaws_cloudtrail:0000092:62671b8d-6312-4f08-a531-e0ec0edb11ae", "row_index": 92, "timestamp": "2018-12-25T20:46:03Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 702, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62671b8d-6312-4f08-a531-e0ec0edb11ae", "eventTime": "2018-12-25T20:46:03Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "617380caa-8cae-461e-a081-09a2749e0bf6", "record_id": "flaws_cloudtrail:0000093:617380caa-8cae-461e-a081-09a2749e0bf6", "row_index": 93, "timestamp": "2018-12-25T20:46:04Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "617380caa-8cae-461e-a081-09a2749e0bf6", "eventTime": "2018-12-25T20:46:04Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a92ee866-8a2a-4b79-b6a6-2abd0676ebd4", "record_id": "flaws_cloudtrail:0000094:a92ee866-8a2a-4b79-b6a6-2abd0676ebd4", "row_index": 94, "timestamp": "2018-12-25T20:46:05Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAC82BFKLHI5UW4S2Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "133.44.33.176", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 533, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a92ee866-8a2a-4b79-b6a6-2abd0676ebd4", "eventTime": "2018-12-25T20:46:05Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "133.44.33.176", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAC82BFKLHI5UW4S2Q", "userName": "Level6"}}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a54f218-2926-468c-9f7d-01b743a38ec6", "record_id": "flaws_cloudtrail:0000095:5a54f218-2926-468c-9f7d-01b743a38ec6", "row_index": 95, "timestamp": "2018-12-25T20:46:06Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 692, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a54f218-2926-468c-9f7d-01b743a38ec6", "eventTime": "2018-12-25T20:46:06Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f4800b06-6b32-41ca-b188-3065eb6ef961", "record_id": "flaws_cloudtrail:0000096:f4800b06-6b32-41ca-b188-3065eb6ef961", "row_index": 96, "timestamp": "2018-12-25T20:46:07Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f4800b06-6b32-41ca-b188-3065eb6ef961", "eventTime": "2018-12-25T20:46:07Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f8c73c6-31e3-4a03-a9a5-66ae194753", "record_id": "flaws_cloudtrail:0000097:7f8c73c6-31e3-4a03-a9a5-66ae194753", "row_index": 97, "timestamp": "2018-12-25T20:46:08Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f8c73c6-31e3-4a03-a9a5-66ae194753", "eventTime": "2018-12-25T20:46:08Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b36aca8e-bbea-4459-8f1e-501e7e1b3193", "record_id": "flaws_cloudtrail:0000098:b36aca8e-bbea-4459-8f1e-501e7e1b3193", "row_index": 98, "timestamp": "2018-12-25T20:46:09Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b36aca8e-bbea-4459-8f1e-501e7e1b3193", "eventTime": "2018-12-25T20:46:09Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "70fe5bf5-407f-4b8e-a4c5-f5b8bf435fef", "record_id": "flaws_cloudtrail:0000099:70fe5bf5-407f-4b8e-a4c5-f5b8bf435fef", "row_index": 99, "timestamp": "2018-12-25T20:46:11Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "70fe5bf5-407f-4b8e-a4c5-f5b8bf435fef", "eventTime": "2018-12-25T20:46:11Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "784116de1-6a39-4bae-8e1e-c241a0516878", "record_id": "flaws_cloudtrail:0000100:784116de1-6a39-4bae-8e1e-c241a0516878", "row_index": 100, "timestamp": "2018-12-25T20:46:12Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "784116de1-6a39-4bae-8e1e-c241a0516878", "eventTime": "2018-12-25T20:46:12Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d72adba2-b8a7-4420-a423-26b57c3c28ef", "record_id": "flaws_cloudtrail:0000101:d72adba2-b8a7-4420-a423-26b57c3c28ef", "row_index": 101, "timestamp": "2018-12-25T20:46:13Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d72adba2-b8a7-4420-a423-26b57c3c28ef", "eventTime": "2018-12-25T20:46:13Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4229cc54-4f56-43a4-801d-f01475e74b36", "record_id": "flaws_cloudtrail:0000102:4229cc54-4f56-43a4-801d-f01475e74b36", "row_index": 102, "timestamp": "2018-12-25T20:46:15Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4229cc54-4f56-43a4-801d-f01475e74b36", "eventTime": "2018-12-25T20:46:15Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a148b2f8-1923-4dbf-b8a9-67569c447", "record_id": "flaws_cloudtrail:0000103:a148b2f8-1923-4dbf-b8a9-67569c447", "row_index": 103, "timestamp": "2018-12-25T20:46:16Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a148b2f8-1923-4dbf-b8a9-67569c447", "eventTime": "2018-12-25T20:46:16Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "235365a57-3b18-48d2-82d2-098c13f1d0fc", "record_id": "flaws_cloudtrail:0000104:235365a57-3b18-48d2-82d2-098c13f1d0fc", "row_index": 104, "timestamp": "2018-12-25T20:46:18Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "235365a57-3b18-48d2-82d2-098c13f1d0fc", "eventTime": "2018-12-25T20:46:18Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d70b02-30d0-4548-a53c-6c103daa9421", "record_id": "flaws_cloudtrail:0000105:94d70b02-30d0-4548-a53c-6c103daa9421", "row_index": 105, "timestamp": "2018-12-25T20:46:19Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d70b02-30d0-4548-a53c-6c103daa9421", "eventTime": "2018-12-25T20:46:19Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b9d092823-662d-4532-ac0f-3f746f92266e", "record_id": "flaws_cloudtrail:0000106:b9d092823-662d-4532-ac0f-3f746f92266e", "row_index": 106, "timestamp": "2018-12-25T20:46:21Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b9d092823-662d-4532-ac0f-3f746f92266e", "eventTime": "2018-12-25T20:46:21Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb541022-845d-4d17-b3ba-fe0b40171155", "record_id": "flaws_cloudtrail:0000107:fb541022-845d-4d17-b3ba-fe0b40171155", "row_index": 107, "timestamp": "2018-12-25T20:46:22Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb541022-845d-4d17-b3ba-fe0b40171155", "eventTime": "2018-12-25T20:46:22Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bfe0447-f993-424d-bdca-730b81035f0c", "record_id": "flaws_cloudtrail:0000108:6bfe0447-f993-424d-bdca-730b81035f0c", "row_index": 108, "timestamp": "2018-12-25T20:46:24Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bfe0447-f993-424d-bdca-730b81035f0c", "eventTime": "2018-12-25T20:46:24Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dc2ddc79-dfa7-46c2-9d78-53076b6a03f9", "record_id": "flaws_cloudtrail:0000109:dc2ddc79-dfa7-46c2-9d78-53076b6a03f9", "row_index": 109, "timestamp": "2018-12-25T20:46:26Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dc2ddc79-dfa7-46c2-9d78-53076b6a03f9", "eventTime": "2018-12-25T20:46:26Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5fe2452-515f-4af2-9313-cf51417e35fd", "record_id": "flaws_cloudtrail:0000110:b5fe2452-515f-4af2-9313-cf51417e35fd", "row_index": 110, "timestamp": "2018-12-25T20:46:28Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5fe2452-515f-4af2-9313-cf51417e35fd", "eventTime": "2018-12-25T20:46:28Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "166bffc6-3de9-42e5-a04a-e339e281f327", "record_id": "flaws_cloudtrail:0000111:166bffc6-3de9-42e5-a04a-e339e281f327", "row_index": 111, "timestamp": "2018-12-25T20:46:29Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "166bffc6-3de9-42e5-a04a-e339e281f327", "eventTime": "2018-12-25T20:46:29Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07b08fa5-b5ec-4496-a91a-7628599b4449", "record_id": "flaws_cloudtrail:0000112:07b08fa5-b5ec-4496-a91a-7628599b4449", "row_index": 112, "timestamp": "2018-12-25T20:46:31Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07b08fa5-b5ec-4496-a91a-7628599b4449", "eventTime": "2018-12-25T20:46:31Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a69ee426-1bee-45a1-b863-4dac48f9fb81", "record_id": "flaws_cloudtrail:0000113:a69ee426-1bee-45a1-b863-4dac48f9fb81", "row_index": 113, "timestamp": "2018-12-25T20:46:32Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a69ee426-1bee-45a1-b863-4dac48f9fb81", "eventTime": "2018-12-25T20:46:32Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f0e231df-9665-478b-aee0-1d71bba8b181", "record_id": "flaws_cloudtrail:0000114:f0e231df-9665-478b-aee0-1d71bba8b181", "row_index": 114, "timestamp": "2018-12-25T20:46:33Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f0e231df-9665-478b-aee0-1d71bba8b181", "eventTime": "2018-12-25T20:46:33Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ccbabd0-381f-4579-b160-69113ec2", "record_id": "flaws_cloudtrail:0000115:0ccbabd0-381f-4579-b160-69113ec2", "row_index": 115, "timestamp": "2018-12-25T20:46:35Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ccbabd0-381f-4579-b160-69113ec2", "eventTime": "2018-12-25T20:46:35Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf19c51d-71b3-40a7-887e-fb9e2ab59d30", "record_id": "flaws_cloudtrail:0000116:cf19c51d-71b3-40a7-887e-fb9e2ab59d30", "row_index": 116, "timestamp": "2018-12-25T20:46:36Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf19c51d-71b3-40a7-887e-fb9e2ab59d30", "eventTime": "2018-12-25T20:46:36Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ff61847c-3238-44a5-9e94-3d0170fa53c8", "record_id": "flaws_cloudtrail:0000117:ff61847c-3238-44a5-9e94-3d0170fa53c8", "row_index": 117, "timestamp": "2018-12-25T20:46:37Z", "event_type": "GetBucketLocation", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ff61847c-3238-44a5-9e94-3d0170fa53c8", "eventTime": "2018-12-25T20:46:37Z", "eventName": "GetBucketLocation", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "location": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d75f56f3-1d39-4b78-9e8f-5f2fefab6c77", "record_id": "flaws_cloudtrail:0000118:d75f56f3-1d39-4b78-9e8f-5f2fefab6c77", "row_index": 118, "timestamp": "2018-12-25T20:46:39Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d75f56f3-1d39-4b78-9e8f-5f2fefab6c77", "eventTime": "2018-12-25T20:46:39Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40cb49c1-1847-4d46-a259-732ce39206e0", "record_id": "flaws_cloudtrail:0000119:40cb49c1-1847-4d46-a259-732ce39206e0", "row_index": 119, "timestamp": "2018-12-25T20:46:40Z", "event_type": "GetBucketAcl", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40cb49c1-1847-4d46-a259-732ce39206e0", "eventTime": "2018-12-25T20:46:40Z", "eventName": "GetBucketAcl", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "acl": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d4c5ee2-219b-4414-9eed-77ce01fef419", "record_id": "flaws_cloudtrail:0000120:9d4c5ee2-219b-4414-9eed-77ce01fef419", "row_index": 120, "timestamp": "2018-12-25T20:46:42Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d4c5ee2-219b-4414-9eed-77ce01fef419", "eventTime": "2018-12-25T20:46:42Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6d886466-e84d-4039-abac-b48311a5e38b", "record_id": "flaws_cloudtrail:0000121:6d886466-e84d-4039-abac-b48311a5e38b", "row_index": 121, "timestamp": "2018-12-25T20:46:43Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6d886466-e84d-4039-abac-b48311a5e38b", "eventTime": "2018-12-25T20:46:43Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e050dadf-ee15-4ccc-89e1-68aa252e8d27", "record_id": "flaws_cloudtrail:0000122:e050dadf-ee15-4ccc-89e1-68aa252e8d27", "row_index": 122, "timestamp": "2018-12-25T20:46:44Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e050dadf-ee15-4ccc-89e1-68aa252e8d27", "eventTime": "2018-12-25T20:46:44Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d66001e-4419-4afa-a8c7-248b83b0ac66", "record_id": "flaws_cloudtrail:0000123:7d66001e-4419-4afa-a8c7-248b83b0ac66", "row_index": 123, "timestamp": "2018-12-25T20:46:45Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d66001e-4419-4afa-a8c7-248b83b0ac66", "eventTime": "2018-12-25T20:46:45Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f5b35d8f-4f1d-4fcb-b9a6-631971e32f66b", "record_id": "flaws_cloudtrail:0000124:f5b35d8f-4f1d-4fcb-b9a6-631971e32f66b", "row_index": 124, "timestamp": "2018-12-25T20:46:46Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 832, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f5b35d8f-4f1d-4fcb-b9a6-631971e32f66b", "eventTime": "2018-12-25T20:46:46Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a3e5b238-e354-48e3-acc1-b862aa873abe", "record_id": "flaws_cloudtrail:0000125:a3e5b238-e354-48e3-acc1-b862aa873abe", "row_index": 125, "timestamp": "2018-12-25T20:46:46Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a3e5b238-e354-48e3-acc1-b862aa873abe", "eventTime": "2018-12-25T20:46:46Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0408b90c-b944-4f28-8400-5c89c4d59e59", "record_id": "flaws_cloudtrail:0000126:0408b90c-b944-4f28-8400-5c89c4d59e59", "row_index": 126, "timestamp": "2018-12-25T20:46:48Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0408b90c-b944-4f28-8400-5c89c4d59e59", "eventTime": "2018-12-25T20:46:48Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbc46bcf-b9ff-47f1-92de-20f86407c7d5", "record_id": "flaws_cloudtrail:0000127:bbc46bcf-b9ff-47f1-92de-20f86407c7d5", "row_index": 127, "timestamp": "2018-12-25T20:46:50Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbc46bcf-b9ff-47f1-92de-20f86407c7d5", "eventTime": "2018-12-25T20:46:50Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8a265c3d-6bbd-4a97-9b94-400659eea6d09", "record_id": "flaws_cloudtrail:0000128:8a265c3d-6bbd-4a97-9b94-400659eea6d09", "row_index": 128, "timestamp": "2018-12-25T20:46:52Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8a265c3d-6bbd-4a97-9b94-400659eea6d09", "eventTime": "2018-12-25T20:46:52Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d483c5-b053-4868-b525-bb267327ae91", "record_id": "flaws_cloudtrail:0000129:94d483c5-b053-4868-b525-bb267327ae91", "row_index": 129, "timestamp": "2018-12-25T20:46:53Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d483c5-b053-4868-b525-bb267327ae91", "eventTime": "2018-12-25T20:46:53Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ee54fd-05df-4d00-b926-ccd10df13df6", "record_id": "flaws_cloudtrail:0000130:04ee54fd-05df-4d00-b926-ccd10df13df6", "row_index": 130, "timestamp": "2018-12-25T20:46:55Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ee54fd-05df-4d00-b926-ccd10df13df6", "eventTime": "2018-12-25T20:46:55Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49250-c4cd-4d30-85a9-07a21c61c302", "record_id": "flaws_cloudtrail:0000131:49250-c4cd-4d30-85a9-07a21c61c302", "row_index": 131, "timestamp": "2018-12-25T20:46:57Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49250-c4cd-4d30-85a9-07a21c61c302", "eventTime": "2018-12-25T20:46:57Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "334c4bc5-7c00-4cb7-b8df-2d65bfd67efa", "record_id": "flaws_cloudtrail:0000132:334c4bc5-7c00-4cb7-b8df-2d65bfd67efa", "row_index": 132, "timestamp": "2018-12-25T20:46:58Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "334c4bc5-7c00-4cb7-b8df-2d65bfd67efa", "eventTime": "2018-12-25T20:46:58Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68b9c581-820e-4ef9-81d3-8c8a0d10b16f", "record_id": "flaws_cloudtrail:0000133:68b9c581-820e-4ef9-81d3-8c8a0d10b16f", "row_index": 133, "timestamp": "2018-12-25T20:46:59Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68b9c581-820e-4ef9-81d3-8c8a0d10b16f", "eventTime": "2018-12-25T20:46:59Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d3d7580e-6e79-45ff-86cb-ced335279e44", "record_id": "flaws_cloudtrail:0000134:d3d7580e-6e79-45ff-86cb-ced335279e44", "row_index": 134, "timestamp": "2018-12-25T20:47:01Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d3d7580e-6e79-45ff-86cb-ced335279e44", "eventTime": "2018-12-25T20:47:01Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7417ad8b-ac4d-4cd3-814d-2f558af6e49e", "record_id": "flaws_cloudtrail:0000135:7417ad8b-ac4d-4cd3-814d-2f558af6e49e", "row_index": 135, "timestamp": "2018-12-25T20:47:02Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 833, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7417ad8b-ac4d-4cd3-814d-2f558af6e49e", "eventTime": "2018-12-25T20:47:02Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4f14b639-1000-4e45-b439-201199f801342a", "record_id": "flaws_cloudtrail:0000136:4f14b639-1000-4e45-b439-201199f801342a", "row_index": 136, "timestamp": "2018-12-25T20:47:04Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4f14b639-1000-4e45-b439-201199f801342a", "eventTime": "2018-12-25T20:47:04Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {"items": [{"name": "ip-permission.cidr", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cda688f-9bbb-4e12-b267-0f9b568848c7", "record_id": "flaws_cloudtrail:0000137:4cda688f-9bbb-4e12-b267-0f9b568848c7", "row_index": 137, "timestamp": "2018-12-25T20:47:05Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 800, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cda688f-9bbb-4e12-b267-0f9b568848c7", "eventTime": "2018-12-25T20:47:05Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e21fdf26-63fa-4b68-891e-14fdf65e5b38", "record_id": "flaws_cloudtrail:0000138:e21fdf26-63fa-4b68-891e-14fdf65e5b38", "row_index": 138, "timestamp": "2018-12-25T20:47:06Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e21fdf26-63fa-4b68-891e-14fdf65e5b38", "eventTime": "2018-12-25T20:47:06Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d66a5cf-b3df-45d7-ad63-65319ee039", "record_id": "flaws_cloudtrail:0000139:7d66a5cf-b3df-45d7-ad63-65319ee039", "row_index": 139, "timestamp": "2018-12-25T20:47:08Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d66a5cf-b3df-45d7-ad63-65319ee039", "eventTime": "2018-12-25T20:47:08Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "235583-f0b7-44b4-9164-95bc4a69a8c1", "record_id": "flaws_cloudtrail:0000140:235583-f0b7-44b4-9164-95bc4a69a8c1", "row_index": 140, "timestamp": "2018-12-25T20:47:09Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "235583-f0b7-44b4-9164-95bc4a69a8c1", "eventTime": "2018-12-25T20:47:09Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "da008058-26ee-4b7e-b3e3-bc37a69c0a50", "record_id": "flaws_cloudtrail:0000141:da008058-26ee-4b7e-b3e3-bc37a69c0a50", "row_index": 141, "timestamp": "2018-12-25T20:47:10Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "da008058-26ee-4b7e-b3e3-bc37a69c0a50", "eventTime": "2018-12-25T20:47:10Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b3318d30-4e30-4a5a-9540-ec266b0dffae", "record_id": "flaws_cloudtrail:0000142:b3318d30-4e30-4a5a-9540-ec266b0dffae", "row_index": 142, "timestamp": "2018-12-25T20:47:10Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b3318d30-4e30-4a5a-9540-ec266b0dffae", "eventTime": "2018-12-25T20:47:10Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "261640ae-a7ac-498a-8bd2-547e886dbbe5", "record_id": "flaws_cloudtrail:0000143:261640ae-a7ac-498a-8bd2-547e886dbbe5", "row_index": 143, "timestamp": "2018-12-25T20:47:11Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "261640ae-a7ac-498a-8bd2-547e886dbbe5", "eventTime": "2018-12-25T20:47:11Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "30c754654-313c-4b3a-9f74-59ce802563e78", "record_id": "flaws_cloudtrail:0000144:30c754654-313c-4b3a-9f74-59ce802563e78", "row_index": 144, "timestamp": "2018-12-25T20:47:12Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 806, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "30c754654-313c-4b3a-9f74-59ce802563e78", "eventTime": "2018-12-25T20:47:12Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be73581f-c98e-4da1-8a9b-dd60687812ca", "record_id": "flaws_cloudtrail:0000145:be73581f-c98e-4da1-8a9b-dd60687812ca", "row_index": 145, "timestamp": "2018-12-25T20:47:13Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be73581f-c98e-4da1-8a9b-dd60687812ca", "eventTime": "2018-12-25T20:47:13Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7512f662-ee44-4b88-8fee-466a7a4f1e0e", "record_id": "flaws_cloudtrail:0000146:7512f662-ee44-4b88-8fee-466a7a4f1e0e", "row_index": 146, "timestamp": "2018-12-25T20:47:13Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7512f662-ee44-4b88-8fee-466a7a4f1e0e", "eventTime": "2018-12-25T20:47:13Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fe439854-387e-428a-be6b-0be4e62eb65b", "record_id": "flaws_cloudtrail:0000147:fe439854-387e-428a-be6b-0be4e62eb65b", "row_index": 147, "timestamp": "2018-12-25T20:47:14Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fe439854-387e-428a-be6b-0be4e62eb65b", "eventTime": "2018-12-25T20:47:14Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c3d78bc-67b3-49bf-8be5-64793b7d584", "record_id": "flaws_cloudtrail:0000148:7c3d78bc-67b3-49bf-8be5-64793b7d584", "row_index": 148, "timestamp": "2018-12-25T20:47:15Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c3d78bc-67b3-49bf-8be5-64793b7d584", "eventTime": "2018-12-25T20:47:15Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a42d0ad4-6d3f-483b-8163-d0a942edbca6", "record_id": "flaws_cloudtrail:0000149:a42d0ad4-6d3f-483b-8163-d0a942edbca6", "row_index": 149, "timestamp": "2018-12-25T20:47:16Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a42d0ad4-6d3f-483b-8163-d0a942edbca6", "eventTime": "2018-12-25T20:47:16Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e835abe5-cd31-4bce-ad39-b715a84f37b9", "record_id": "flaws_cloudtrail:0000150:e835abe5-cd31-4bce-ad39-b715a84f37b9", "row_index": 150, "timestamp": "2018-12-25T20:47:18Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e835abe5-cd31-4bce-ad39-b715a84f37b9", "eventTime": "2018-12-25T20:47:18Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "07c9ea8f-a7cf-4115-af0e-7355f6920974", "record_id": "flaws_cloudtrail:0000151:07c9ea8f-a7cf-4115-af0e-7355f6920974", "row_index": 151, "timestamp": "2018-12-25T20:47:20Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "07c9ea8f-a7cf-4115-af0e-7355f6920974", "eventTime": "2018-12-25T20:47:20Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ef518bb-633e-44be-8a6f-96aa82cd6506", "record_id": "flaws_cloudtrail:0000152:7ef518bb-633e-44be-8a6f-96aa82cd6506", "row_index": 152, "timestamp": "2018-12-25T20:47:22Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 810, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ef518bb-633e-44be-8a6f-96aa82cd6506", "eventTime": "2018-12-25T20:47:22Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ea2449a-da02-46d9-8eb8-24225d6ecd4", "record_id": "flaws_cloudtrail:0000153:1ea2449a-da02-46d9-8eb8-24225d6ecd4", "row_index": 153, "timestamp": "2018-12-25T20:47:23Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ea2449a-da02-46d9-8eb8-24225d6ecd4", "eventTime": "2018-12-25T20:47:23Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dab8d8d-ed79-4f4e-880d-50f0069fd612", "record_id": "flaws_cloudtrail:0000154:3dab8d8d-ed79-4f4e-880d-50f0069fd612", "row_index": 154, "timestamp": "2018-12-25T20:47:25Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dab8d8d-ed79-4f4e-880d-50f0069fd612", "eventTime": "2018-12-25T20:47:25Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "144b7cc5-48e0-45c7-bae9-e69bd446dc19", "record_id": "flaws_cloudtrail:0000155:144b7cc5-48e0-45c7-bae9-e69bd446dc19", "row_index": 155, "timestamp": "2018-12-25T20:47:26Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "144b7cc5-48e0-45c7-bae9-e69bd446dc19", "eventTime": "2018-12-25T20:47:26Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1b51a68-fe99-493e-95fa-35e33fdee4bb", "record_id": "flaws_cloudtrail:0000156:d1b51a68-fe99-493e-95fa-35e33fdee4bb", "row_index": 156, "timestamp": "2018-12-25T20:47:27Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 807, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1b51a68-fe99-493e-95fa-35e33fdee4bb", "eventTime": "2018-12-25T20:47:27Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c8fbe13a-2376-4835-88e0-d19aa537a514", "record_id": "flaws_cloudtrail:0000157:c8fbe13a-2376-4835-88e0-d19aa537a514", "row_index": 157, "timestamp": "2018-12-25T20:47:29Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c8fbe13a-2376-4835-88e0-d19aa537a514", "eventTime": "2018-12-25T20:47:29Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a7d73d3-26e9-4ded-b918-5e118c7bcf41", "record_id": "flaws_cloudtrail:0000158:2a7d73d3-26e9-4ded-b918-5e118c7bcf41", "row_index": 158, "timestamp": "2018-12-25T20:47:30Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a7d73d3-26e9-4ded-b918-5e118c7bcf41", "eventTime": "2018-12-25T20:47:30Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fbe221ca-aa92-4fe4-a80a-3960ed0b5e2e", "record_id": "flaws_cloudtrail:0000159:fbe221ca-aa92-4fe4-a80a-3960ed0b5e2e", "row_index": 159, "timestamp": "2018-12-25T20:47:32Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fbe221ca-aa92-4fe4-a80a-3960ed0b5e2e", "eventTime": "2018-12-25T20:47:32Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0983e40e-71e4-4f71-899f-9a23afb9bcd4", "record_id": "flaws_cloudtrail:0000160:0983e40e-71e4-4f71-899f-9a23afb9bcd4", "row_index": 160, "timestamp": "2018-12-25T20:47:34Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 809, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0983e40e-71e4-4f71-899f-9a23afb9bcd4", "eventTime": "2018-12-25T20:47:34Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a66a906-f5e1-4c24-a5a0-ce0f9ee7fbb4", "record_id": "flaws_cloudtrail:0000161:2a66a906-f5e1-4c24-a5a0-ce0f9ee7fbb4", "row_index": 161, "timestamp": "2018-12-25T20:47:35Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a66a906-f5e1-4c24-a5a0-ce0f9ee7fbb4", "eventTime": "2018-12-25T20:47:35Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cbb4801-5ba5-4dfd-ad09-ecd1b988883de", "record_id": "flaws_cloudtrail:0000162:4cbb4801-5ba5-4dfd-ad09-ecd1b988883de", "row_index": 162, "timestamp": "2018-12-25T20:47:36Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 808, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cbb4801-5ba5-4dfd-ad09-ecd1b988883de", "eventTime": "2018-12-25T20:47:36Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e44a96cd-5aed-40df-b697-175519e85862", "record_id": "flaws_cloudtrail:0000163:e44a96cd-5aed-40df-b697-175519e85862", "row_index": 163, "timestamp": "2018-12-25T20:47:37Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e44a96cd-5aed-40df-b697-175519e85862", "eventTime": "2018-12-25T20:47:37Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9045a88a-778c-4915-9e38-9f35b6b359d9", "record_id": "flaws_cloudtrail:0000164:9045a88a-778c-4915-9e38-9f35b6b359d9", "row_index": 164, "timestamp": "2018-12-25T20:47:38Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9045a88a-778c-4915-9e38-9f35b6b359d9", "eventTime": "2018-12-25T20:47:38Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0f6d3da8-7f2d-470a-abbb-ecd0b05c6f67", "record_id": "flaws_cloudtrail:0000165:0f6d3da8-7f2d-470a-abbb-ecd0b05c6f67", "row_index": 165, "timestamp": "2018-12-25T20:47:40Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0f6d3da8-7f2d-470a-abbb-ecd0b05c6f67", "eventTime": "2018-12-25T20:47:40Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94938a5-e464-4200-9384-09d24ff3a5d3", "record_id": "flaws_cloudtrail:0000166:94938a5-e464-4200-9384-09d24ff3a5d3", "row_index": 166, "timestamp": "2018-12-25T20:47:41Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 803, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94938a5-e464-4200-9384-09d24ff3a5d3", "eventTime": "2018-12-25T20:47:41Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21c024f3-e515-405d-b1c2-5ee3877beb4f", "record_id": "flaws_cloudtrail:0000167:21c024f3-e515-405d-b1c2-5ee3877beb4f", "row_index": 167, "timestamp": "2018-12-25T20:47:42Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21c024f3-e515-405d-b1c2-5ee3877beb4f", "eventTime": "2018-12-25T20:47:42Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fb665c6-d0f5-421c-83b6-52c5a52dd4fb", "record_id": "flaws_cloudtrail:0000168:5fb665c6-d0f5-421c-83b6-52c5a52dd4fb", "row_index": 168, "timestamp": "2018-12-25T20:47:44Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fb665c6-d0f5-421c-83b6-52c5a52dd4fb", "eventTime": "2018-12-25T20:47:44Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aac6c8e6-6191-4a06-87e0-a6136d7d10ae", "record_id": "flaws_cloudtrail:0000169:aac6c8e6-6191-4a06-87e0-a6136d7d10ae", "row_index": 169, "timestamp": "2018-12-25T20:47:45Z", "event_type": "DescribeSecurityGroups", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aac6c8e6-6191-4a06-87e0-a6136d7d10ae", "eventTime": "2018-12-25T20:47:45Z", "eventName": "DescribeSecurityGroups", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"securityGroupSet": {}, "securityGroupIdSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74885d-d35c-4270-81dc-0568ec85772b", "record_id": "flaws_cloudtrail:0000170:74885d-d35c-4270-81dc-0568ec85772b", "row_index": 170, "timestamp": "2018-12-25T20:47:47Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 802, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74885d-d35c-4270-81dc-0568ec85772b", "eventTime": "2018-12-25T20:47:47Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9a3b871-85aa-49d8-8eeb-caca561ec122", "record_id": "flaws_cloudtrail:0000171:a9a3b871-85aa-49d8-8eeb-caca561ec122", "row_index": 171, "timestamp": "2018-12-25T20:47:48Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 804, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9a3b871-85aa-49d8-8eeb-caca561ec122", "eventTime": "2018-12-25T20:47:48Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "673183-4d1c-40c2-bc10-0ebf9d5d13fa", "record_id": "flaws_cloudtrail:0000172:673183-4d1c-40c2-bc10-0ebf9d5d13fa", "row_index": 172, "timestamp": "2018-12-25T20:47:50Z", "event_type": "DescribeNetworkInterfaces", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 801, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "673183-4d1c-40c2-bc10-0ebf9d5d13fa", "eventTime": "2018-12-25T20:47:50Z", "eventName": "DescribeNetworkInterfaces", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"networkInterfaceIdSet": {}, "filterSet": {"items": [{"name": "group-id", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b933a6f7-0ec8-402b-9d3e-9cf33f9a8345", "record_id": "flaws_cloudtrail:0000173:b933a6f7-0ec8-402b-9d3e-9cf33f9a8345", "row_index": 173, "timestamp": "2018-12-25T20:47:51Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 835, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b933a6f7-0ec8-402b-9d3e-9cf33f9a8345", "eventTime": "2018-12-25T20:47:51Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a139abf-b019-4a6e-9993-db64c823c5c5", "record_id": "flaws_cloudtrail:0000174:3a139abf-b019-4a6e-9993-db64c823c5c5", "row_index": 174, "timestamp": "2018-12-25T20:47:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a139abf-b019-4a6e-9993-db64c823c5c5", "eventTime": "2018-12-25T20:47:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6b51677-d0b6-4b7f-9c1b-115030e2fa41", "record_id": "flaws_cloudtrail:0000175:6b51677-d0b6-4b7f-9c1b-115030e2fa41", "row_index": 175, "timestamp": "2018-12-25T20:47:52Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 836, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6b51677-d0b6-4b7f-9c1b-115030e2fa41", "eventTime": "2018-12-25T20:47:52Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8f2c26ff-daa9-40a3-90af-195d473ecfac", "record_id": "flaws_cloudtrail:0000176:8f2c26ff-daa9-40a3-90af-195d473ecfac", "row_index": 176, "timestamp": "2018-12-25T20:47:53Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 834, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8f2c26ff-daa9-40a3-90af-195d473ecfac", "eventTime": "2018-12-25T20:47:53Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a5f8c099-4c27-4cbb-9fc4-72eec6ac6208", "record_id": "flaws_cloudtrail:0000177:a5f8c099-4c27-4cbb-9fc4-72eec6ac6208", "row_index": 177, "timestamp": "2018-12-25T20:47:54Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a5f8c099-4c27-4cbb-9fc4-72eec6ac6208", "eventTime": "2018-12-25T20:47:54Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9d3a411-6c62-4a0d-9873-744791d5d1ba1", "record_id": "flaws_cloudtrail:0000178:a9d3a411-6c62-4a0d-9873-744791d5d1ba1", "row_index": 178, "timestamp": "2018-12-25T20:47:56Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 843, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9d3a411-6c62-4a0d-9873-744791d5d1ba1", "eventTime": "2018-12-25T20:47:56Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f617084-f4be-4088-873e-918ea33fd6ca", "record_id": "flaws_cloudtrail:0000179:f617084-f4be-4088-873e-918ea33fd6ca", "row_index": 179, "timestamp": "2018-12-25T20:47:58Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 841, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f617084-f4be-4088-873e-918ea33fd6ca", "eventTime": "2018-12-25T20:47:58Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "82c712865-0c53-42d0-8193-e96c2bc0f3f0", "record_id": "flaws_cloudtrail:0000180:82c712865-0c53-42d0-8193-e96c2bc0f3f0", "row_index": 180, "timestamp": "2018-12-25T20:47:59Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "82c712865-0c53-42d0-8193-e96c2bc0f3f0", "eventTime": "2018-12-25T20:47:59Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e97671-de40-487c-927b-2c25133e7cb5", "record_id": "flaws_cloudtrail:0000181:e97671-de40-487c-927b-2c25133e7cb5", "row_index": 181, "timestamp": "2018-12-25T20:48:00Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e97671-de40-487c-927b-2c25133e7cb5", "eventTime": "2018-12-25T20:48:00Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb1ed8c2-e25d-4e0d-9a88-15092bdafa3e", "record_id": "flaws_cloudtrail:0000182:bb1ed8c2-e25d-4e0d-9a88-15092bdafa3e", "row_index": 182, "timestamp": "2018-12-25T20:48:02Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb1ed8c2-e25d-4e0d-9a88-15092bdafa3e", "eventTime": "2018-12-25T20:48:02Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "185223e9-6a53-4682-9555-9c4507b4dce1", "record_id": "flaws_cloudtrail:0000183:185223e9-6a53-4682-9555-9c4507b4dce1", "row_index": 183, "timestamp": "2018-12-25T20:48:04Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 842, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "185223e9-6a53-4682-9555-9c4507b4dce1", "eventTime": "2018-12-25T20:48:04Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eb6b567f-938d-400b-8d6d-c76e53d1d5e4", "record_id": "flaws_cloudtrail:0000184:eb6b567f-938d-400b-8d6d-c76e53d1d5e4", "row_index": 184, "timestamp": "2018-12-25T20:48:05Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 839, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eb6b567f-938d-400b-8d6d-c76e53d1d5e4", "eventTime": "2018-12-25T20:48:05Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "13ef7d44-6fd1-4f2f-adae-a642ee226b34", "record_id": "flaws_cloudtrail:0000185:13ef7d44-6fd1-4f2f-adae-a642ee226b34", "row_index": 185, "timestamp": "2018-12-25T20:48:06Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "13ef7d44-6fd1-4f2f-adae-a642ee226b34", "eventTime": "2018-12-25T20:48:06Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8008dd22-c9ef-40af-84bc-c584d86cb2f9", "record_id": "flaws_cloudtrail:0000186:8008dd22-c9ef-40af-84bc-c584d86cb2f9", "row_index": 186, "timestamp": "2018-12-25T20:48:07Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8008dd22-c9ef-40af-84bc-c584d86cb2f9", "eventTime": "2018-12-25T20:48:07Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad507f4e-d8e4-411f-b2e5-f9fd40f9cbfc", "record_id": "flaws_cloudtrail:0000187:ad507f4e-d8e4-411f-b2e5-f9fd40f9cbfc", "row_index": 187, "timestamp": "2018-12-25T20:48:08Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad507f4e-d8e4-411f-b2e5-f9fd40f9cbfc", "eventTime": "2018-12-25T20:48:08Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fc9d90b-3a0a-44f1-915a-8cbb8e7b618a", "record_id": "flaws_cloudtrail:0000188:8fc9d90b-3a0a-44f1-915a-8cbb8e7b618a", "row_index": 188, "timestamp": "2018-12-25T20:48:10Z", "event_type": "DescribeImages", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 837, "raw_record_depth": 8, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fc9d90b-3a0a-44f1-915a-8cbb8e7b618a", "eventTime": "2018-12-25T20:48:10Z", "eventName": "DescribeImages", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"executableBySet": {}, "imagesSet": {}, "ownersSet": {"items": [{"owner": "self"}]}, "filterSet": {"items": [{"name": "is-public", "valueSet": {"items": {"__truncated_type": "list"}}}]}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3eae5d66-0fc3-47bd-9586-165e06db7af0", "record_id": "flaws_cloudtrail:0000189:3eae5d66-0fc3-47bd-9586-165e06db7af0", "row_index": 189, "timestamp": "2018-12-25T20:48:11Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3eae5d66-0fc3-47bd-9586-165e06db7af0", "eventTime": "2018-12-25T20:48:11Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7d70afe5-5328-451a-9119-0b434641e94", "record_id": "flaws_cloudtrail:0000190:7d70afe5-5328-451a-9119-0b434641e94", "row_index": 190, "timestamp": "2018-12-25T20:48:12Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7d70afe5-5328-451a-9119-0b434641e94", "eventTime": "2018-12-25T20:48:12Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "647c1796-9819-43a4-a719-e4121d39bcb5", "record_id": "flaws_cloudtrail:0000191:647c1796-9819-43a4-a719-e4121d39bcb5", "row_index": 191, "timestamp": "2018-12-25T20:48:12Z", "event_type": "GetTrailStatus", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAC82BFKLHI5UW4S2Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "133.44.33.176", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1818"], "raw_record_size_bytes": 658, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "647c1796-9819-43a4-a719-e4121d39bcb5", "eventTime": "2018-12-25T20:48:12Z", "eventName": "GetTrailStatus", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "133.44.33.176", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAC82BFKLHI5UW4S2Q", "userName": "Level6"}, "requestParameters": {"name": "trail-1818"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1818"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8749fd59-2e46-424f-9a05-4af3eeaefa37", "record_id": "flaws_cloudtrail:0000192:8749fd59-2e46-424f-9a05-4af3eeaefa37", "row_index": 192, "timestamp": "2018-12-25T20:48:13Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8749fd59-2e46-424f-9a05-4af3eeaefa37", "eventTime": "2018-12-25T20:48:13Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "401dfe9b-543d-4475-bcd4-ccc4c7a52f19", "record_id": "flaws_cloudtrail:0000193:401dfe9b-543d-4475-bcd4-ccc4c7a52f19", "row_index": 193, "timestamp": "2018-12-25T20:48:13Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "401dfe9b-543d-4475-bcd4-ccc4c7a52f19", "eventTime": "2018-12-25T20:48:13Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "10a8b53f-f4b0-4ade-8117-a94cd8dffdf3", "record_id": "flaws_cloudtrail:0000194:10a8b53f-f4b0-4ade-8117-a94cd8dffdf3", "row_index": 194, "timestamp": "2018-12-25T20:48:14Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "10a8b53f-f4b0-4ade-8117-a94cd8dffdf3", "eventTime": "2018-12-25T20:48:14Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8d26b8a-28f9-47a8-b919-50d238bd1ea0", "record_id": "flaws_cloudtrail:0000195:e8d26b8a-28f9-47a8-b919-50d238bd1ea0", "row_index": 195, "timestamp": "2018-12-25T20:48:16Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8d26b8a-28f9-47a8-b919-50d238bd1ea0", "eventTime": "2018-12-25T20:48:16Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b2d0e30-dadd-4dfe-be8f-5b52b9f1af53", "record_id": "flaws_cloudtrail:0000196:4b2d0e30-dadd-4dfe-be8f-5b52b9f1af53", "row_index": 196, "timestamp": "2018-12-25T20:48:18Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b2d0e30-dadd-4dfe-be8f-5b52b9f1af53", "eventTime": "2018-12-25T20:48:18Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adc6b799-5f01-46da-8ca8-156c5f6439e0", "record_id": "flaws_cloudtrail:0000197:adc6b799-5f01-46da-8ca8-156c5f6439e0", "row_index": 197, "timestamp": "2018-12-25T20:48:19Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adc6b799-5f01-46da-8ca8-156c5f6439e0", "eventTime": "2018-12-25T20:48:19Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c915e1f1-b66c-44dc-9465-c40372e8c8", "record_id": "flaws_cloudtrail:0000198:c915e1f1-b66c-44dc-9465-c40372e8c8", "row_index": 198, "timestamp": "2018-12-25T20:48:21Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c915e1f1-b66c-44dc-9465-c40372e8c8", "eventTime": "2018-12-25T20:48:21Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "643639f-c396-4991-b075-e9a94334bec", "record_id": "flaws_cloudtrail:0000199:643639f-c396-4991-b075-e9a94334bec", "row_index": 199, "timestamp": "2018-12-25T20:48:22Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "643639f-c396-4991-b075-e9a94334bec", "eventTime": "2018-12-25T20:48:22Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ddd9f43f-84ae-4d95-a5eb-af0117bdcc01", "record_id": "flaws_cloudtrail:0000200:ddd9f43f-84ae-4d95-a5eb-af0117bdcc01", "row_index": 200, "timestamp": "2018-12-25T20:48:24Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ddd9f43f-84ae-4d95-a5eb-af0117bdcc01", "eventTime": "2018-12-25T20:48:24Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94ea1e75-217f-4f10-b5e5-6c000d7a1fbf", "record_id": "flaws_cloudtrail:0000201:94ea1e75-217f-4f10-b5e5-6c000d7a1fbf", "row_index": 201, "timestamp": "2018-12-25T20:48:25Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94ea1e75-217f-4f10-b5e5-6c000d7a1fbf", "eventTime": "2018-12-25T20:48:25Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf57c930-81f0-43a6-a86a-45ed14996de6", "record_id": "flaws_cloudtrail:0000202:cf57c930-81f0-43a6-a86a-45ed14996de6", "row_index": 202, "timestamp": "2018-12-25T20:48:26Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf57c930-81f0-43a6-a86a-45ed14996de6", "eventTime": "2018-12-25T20:48:26Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4b74e14-384c-49a6-9196-bebfb66da3c9", "record_id": "flaws_cloudtrail:0000203:c4b74e14-384c-49a6-9196-bebfb66da3c9", "row_index": 203, "timestamp": "2018-12-25T20:48:27Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4b74e14-384c-49a6-9196-bebfb66da3c9", "eventTime": "2018-12-25T20:48:27Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49a2b516-48e7-408a-af7b-b8c038d49857", "record_id": "flaws_cloudtrail:0000204:49a2b516-48e7-408a-af7b-b8c038d49857", "row_index": 204, "timestamp": "2018-12-25T20:48:29Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49a2b516-48e7-408a-af7b-b8c038d49857", "eventTime": "2018-12-25T20:48:29Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ec528cfb-4463-4dc9-b330-9b77bf64b696", "record_id": "flaws_cloudtrail:0000205:ec528cfb-4463-4dc9-b330-9b77bf64b696", "row_index": 205, "timestamp": "2018-12-25T20:48:31Z", "event_type": "DescribeRepositories", "event_source": "ecr.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ec528cfb-4463-4dc9-b330-9b77bf64b696", "eventTime": "2018-12-25T20:48:31Z", "eventName": "DescribeRepositories", "eventSource": "ecr.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fcc7530d-2b45-461a-b87f-f9a407f0861a", "record_id": "flaws_cloudtrail:0000206:fcc7530d-2b45-461a-b87f-f9a407f0861a", "row_index": 206, "timestamp": "2018-12-25T20:48:32Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fcc7530d-2b45-461a-b87f-f9a407f0861a", "eventTime": "2018-12-25T20:48:32Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e9cfb296-8ba1-4b64-971c-8d124c9a2e13", "record_id": "flaws_cloudtrail:0000207:e9cfb296-8ba1-4b64-971c-8d124c9a2e13", "row_index": 207, "timestamp": "2018-12-25T20:48:33Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e9cfb296-8ba1-4b64-971c-8d124c9a2e13", "eventTime": "2018-12-25T20:48:33Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02f77c52-d25b-4ce3-af3b-8519d42b6a46", "record_id": "flaws_cloudtrail:0000208:02f77c52-d25b-4ce3-af3b-8519d42b6a46", "row_index": 208, "timestamp": "2018-12-25T20:48:33Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02f77c52-d25b-4ce3-af3b-8519d42b6a46", "eventTime": "2018-12-25T20:48:33Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "749a710f-a0c4-430d-bad8-f41a18e2564a", "record_id": "flaws_cloudtrail:0000209:749a710f-a0c4-430d-bad8-f41a18e2564a", "row_index": 209, "timestamp": "2018-12-25T20:48:34Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "749a710f-a0c4-430d-bad8-f41a18e2564a", "eventTime": "2018-12-25T20:48:34Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "535f3ddb-c34b-4292-81da-49300bfd1b9f", "record_id": "flaws_cloudtrail:0000210:535f3ddb-c34b-4292-81da-49300bfd1b9f", "row_index": 210, "timestamp": "2018-12-25T20:48:35Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "535f3ddb-c34b-4292-81da-49300bfd1b9f", "eventTime": "2018-12-25T20:48:35Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3f9196cf-6127-40c6-a040-b2d95cffacd6", "record_id": "flaws_cloudtrail:0000211:3f9196cf-6127-40c6-a040-b2d95cffacd6", "row_index": 211, "timestamp": "2018-12-25T20:48:37Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3f9196cf-6127-40c6-a040-b2d95cffacd6", "eventTime": "2018-12-25T20:48:37Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d83042-8d4b-400e-9946-254ae3dc771d", "record_id": "flaws_cloudtrail:0000212:0d83042-8d4b-400e-9946-254ae3dc771d", "row_index": 212, "timestamp": "2018-12-25T20:48:38Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d83042-8d4b-400e-9946-254ae3dc771d", "eventTime": "2018-12-25T20:48:38Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "496299d8-bdbd-4cd9-90f9-2b4c6ef81ce8", "record_id": "flaws_cloudtrail:0000213:496299d8-bdbd-4cd9-90f9-2b4c6ef81ce8", "row_index": 213, "timestamp": "2018-12-25T20:48:40Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "496299d8-bdbd-4cd9-90f9-2b4c6ef81ce8", "eventTime": "2018-12-25T20:48:40Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "55ae977d-0cd3-4e72-924a-01a7269c99d2", "record_id": "flaws_cloudtrail:0000214:55ae977d-0cd3-4e72-924a-01a7269c99d2", "row_index": 214, "timestamp": "2018-12-25T20:48:41Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "55ae977d-0cd3-4e72-924a-01a7269c99d2", "eventTime": "2018-12-25T20:48:41Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06e96266-da6c-4837-8cb2-a9fef1c6a763", "record_id": "flaws_cloudtrail:0000215:06e96266-da6c-4837-8cb2-a9fef1c6a763", "row_index": 215, "timestamp": "2018-12-25T20:48:43Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06e96266-da6c-4837-8cb2-a9fef1c6a763", "eventTime": "2018-12-25T20:48:43Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83dcfb54-7b46-41ba-a87f-dff633fbc0c1", "record_id": "flaws_cloudtrail:0000216:83dcfb54-7b46-41ba-a87f-dff633fbc0c1", "row_index": 216, "timestamp": "2018-12-25T20:48:45Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 688, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83dcfb54-7b46-41ba-a87f-dff633fbc0c1", "eventTime": "2018-12-25T20:48:45Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b613d7a5-b6ae-4890-9b6e-ccb1692a3263", "record_id": "flaws_cloudtrail:0000217:b613d7a5-b6ae-4890-9b6e-ccb1692a3263", "row_index": 217, "timestamp": "2018-12-25T20:48:46Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b613d7a5-b6ae-4890-9b6e-ccb1692a3263", "eventTime": "2018-12-25T20:48:46Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c46fed19-548e-4dea-8a0c-47be17e73807", "record_id": "flaws_cloudtrail:0000218:c46fed19-548e-4dea-8a0c-47be17e73807", "row_index": 218, "timestamp": "2018-12-25T20:48:47Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c46fed19-548e-4dea-8a0c-47be17e73807", "eventTime": "2018-12-25T20:48:47Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad73504-84a6-4e01-904e-c0a3f0655d0a", "record_id": "flaws_cloudtrail:0000219:ad73504-84a6-4e01-904e-c0a3f0655d0a", "row_index": 219, "timestamp": "2018-12-25T20:48:48Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad73504-84a6-4e01-904e-c0a3f0655d0a", "eventTime": "2018-12-25T20:48:48Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "edb78dcf-4455-4934-90c9-c10c5aa12ad7", "record_id": "flaws_cloudtrail:0000220:edb78dcf-4455-4934-90c9-c10c5aa12ad7", "row_index": 220, "timestamp": "2018-12-25T20:48:49Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "edb78dcf-4455-4934-90c9-c10c5aa12ad7", "eventTime": "2018-12-25T20:48:49Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fe1f0d2-b2fc-4edb-a3b7-9f129707ccf43", "record_id": "flaws_cloudtrail:0000221:5fe1f0d2-b2fc-4edb-a3b7-9f129707ccf43", "row_index": 221, "timestamp": "2018-12-25T20:48:50Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fe1f0d2-b2fc-4edb-a3b7-9f129707ccf43", "eventTime": "2018-12-25T20:48:50Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f7d3f4df-5218-4838-bf26-560b00900e5", "record_id": "flaws_cloudtrail:0000222:f7d3f4df-5218-4838-bf26-560b00900e5", "row_index": 222, "timestamp": "2018-12-25T20:48:52Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f7d3f4df-5218-4838-bf26-560b00900e5", "eventTime": "2018-12-25T20:48:52Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e03071-9511-46d6-bd4b-cac21735da9f", "record_id": "flaws_cloudtrail:0000223:6e03071-9511-46d6-bd4b-cac21735da9f", "row_index": 223, "timestamp": "2018-12-25T20:48:53Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e03071-9511-46d6-bd4b-cac21735da9f", "eventTime": "2018-12-25T20:48:53Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c711a982-dcf7-4889-976e-78f1dc1bdfd3", "record_id": "flaws_cloudtrail:0000224:c711a982-dcf7-4889-976e-78f1dc1bdfd3", "row_index": 224, "timestamp": "2018-12-25T20:48:53Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c711a982-dcf7-4889-976e-78f1dc1bdfd3", "eventTime": "2018-12-25T20:48:53Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eff461118-3b1c-4f15-973b-e97edc27c178", "record_id": "flaws_cloudtrail:0000225:eff461118-3b1c-4f15-973b-e97edc27c178", "row_index": 225, "timestamp": "2018-12-25T20:48:54Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eff461118-3b1c-4f15-973b-e97edc27c178", "eventTime": "2018-12-25T20:48:54Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b04363-dabb-4f05-a89c-c7c796055616", "record_id": "flaws_cloudtrail:0000226:b04363-dabb-4f05-a89c-c7c796055616", "row_index": 226, "timestamp": "2018-12-25T20:48:55Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b04363-dabb-4f05-a89c-c7c796055616", "eventTime": "2018-12-25T20:48:55Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2c5d148-726a-4f02-b880-7b91e160637a", "record_id": "flaws_cloudtrail:0000227:d2c5d148-726a-4f02-b880-7b91e160637a", "row_index": 227, "timestamp": "2018-12-25T20:48:55Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2c5d148-726a-4f02-b880-7b91e160637a", "eventTime": "2018-12-25T20:48:55Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ecceb87f-7d69-4669-af2e-34a4aa406306", "record_id": "flaws_cloudtrail:0000228:ecceb87f-7d69-4669-af2e-34a4aa406306", "row_index": 228, "timestamp": "2018-12-25T20:48:56Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ecceb87f-7d69-4669-af2e-34a4aa406306", "eventTime": "2018-12-25T20:48:56Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fec7de00-3e3e-49a3-9c37-b91aeac1db3e", "record_id": "flaws_cloudtrail:0000229:fec7de00-3e3e-49a3-9c37-b91aeac1db3e", "row_index": 229, "timestamp": "2018-12-25T20:48:57Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fec7de00-3e3e-49a3-9c37-b91aeac1db3e", "eventTime": "2018-12-25T20:48:57Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0a0a926-b54f-4c28-90c5-eca2bbb972c9", "record_id": "flaws_cloudtrail:0000230:d0a0a926-b54f-4c28-90c5-eca2bbb972c9", "row_index": 230, "timestamp": "2018-12-25T20:48:57Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0a0a926-b54f-4c28-90c5-eca2bbb972c9", "eventTime": "2018-12-25T20:48:57Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c2a4ba3-6481-457a-b0cf-a86f7dd15008", "record_id": "flaws_cloudtrail:0000231:7c2a4ba3-6481-457a-b0cf-a86f7dd15008", "row_index": 231, "timestamp": "2018-12-25T20:48:58Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c2a4ba3-6481-457a-b0cf-a86f7dd15008", "eventTime": "2018-12-25T20:48:58Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dee68799-8b01-4202-a5bb-4029321cc242", "record_id": "flaws_cloudtrail:0000232:dee68799-8b01-4202-a5bb-4029321cc242", "row_index": 232, "timestamp": "2018-12-25T20:49:00Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dee68799-8b01-4202-a5bb-4029321cc242", "eventTime": "2018-12-25T20:49:00Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5fd83cea-34e6-4837-bd37-3c2e722bd333", "record_id": "flaws_cloudtrail:0000233:5fd83cea-34e6-4837-bd37-3c2e722bd333", "row_index": 233, "timestamp": "2018-12-25T20:49:02Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5fd83cea-34e6-4837-bd37-3c2e722bd333", "eventTime": "2018-12-25T20:49:02Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d29b1b34-c6dd-483f-970e-afad0e2fbe24", "record_id": "flaws_cloudtrail:0000234:d29b1b34-c6dd-483f-970e-afad0e2fbe24", "row_index": 234, "timestamp": "2018-12-25T20:49:02Z", "event_type": "StopLogging", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAC82BFKLHI5UW4S2Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "133.44.33.176", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1818"], "raw_record_size_bytes": 655, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d29b1b34-c6dd-483f-970e-afad0e2fbe24", "eventTime": "2018-12-25T20:49:02Z", "eventName": "StopLogging", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "133.44.33.176", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAC82BFKLHI5UW4S2Q", "userName": "Level6"}, "requestParameters": {"name": "trail-1818"}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1818"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b4cf23b-f53d-4095-ad8e-d48d91924d4c", "record_id": "flaws_cloudtrail:0000235:0b4cf23b-f53d-4095-ad8e-d48d91924d4c", "row_index": 235, "timestamp": "2018-12-25T20:49:03Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b4cf23b-f53d-4095-ad8e-d48d91924d4c", "eventTime": "2018-12-25T20:49:03Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0af560148-4a83-498d-8e67-89e9885b3820", "record_id": "flaws_cloudtrail:0000236:0af560148-4a83-498d-8e67-89e9885b3820", "row_index": 236, "timestamp": "2018-12-25T20:49:05Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0af560148-4a83-498d-8e67-89e9885b3820", "eventTime": "2018-12-25T20:49:05Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1bd7d2f7-d5fd-4578-b866-cc9661dc2eee", "record_id": "flaws_cloudtrail:0000237:1bd7d2f7-d5fd-4578-b866-cc9661dc2eee", "row_index": 237, "timestamp": "2018-12-25T20:49:06Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1bd7d2f7-d5fd-4578-b866-cc9661dc2eee", "eventTime": "2018-12-25T20:49:06Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "04ccecd1-c7d7-4393-9c18-8a48660c0d2", "record_id": "flaws_cloudtrail:0000238:04ccecd1-c7d7-4393-9c18-8a48660c0d2", "row_index": 238, "timestamp": "2018-12-25T20:49:08Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "04ccecd1-c7d7-4393-9c18-8a48660c0d2", "eventTime": "2018-12-25T20:49:08Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5eccacd0-51e4-46f8-95e2-1165b306848e", "record_id": "flaws_cloudtrail:0000239:5eccacd0-51e4-46f8-95e2-1165b306848e", "row_index": 239, "timestamp": "2018-12-25T20:49:09Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5eccacd0-51e4-46f8-95e2-1165b306848e", "eventTime": "2018-12-25T20:49:09Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a17279-7d39-4245-87cf-72e039958a45", "record_id": "flaws_cloudtrail:0000240:0a17279-7d39-4245-87cf-72e039958a45", "row_index": 240, "timestamp": "2018-12-25T20:49:10Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a17279-7d39-4245-87cf-72e039958a45", "eventTime": "2018-12-25T20:49:10Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "87a95adf-9667-4d77-b149-45517cf2a7f8", "record_id": "flaws_cloudtrail:0000241:87a95adf-9667-4d77-b149-45517cf2a7f8", "row_index": 241, "timestamp": "2018-12-25T20:49:11Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "87a95adf-9667-4d77-b149-45517cf2a7f8", "eventTime": "2018-12-25T20:49:11Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38fd4c17-a773-4d30-b9df-5680dcbed390", "record_id": "flaws_cloudtrail:0000242:38fd4c17-a773-4d30-b9df-5680dcbed390", "row_index": 242, "timestamp": "2018-12-25T20:49:13Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38fd4c17-a773-4d30-b9df-5680dcbed390", "eventTime": "2018-12-25T20:49:13Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "64ca130a-2b29-42b2-a1d9-16d172e0841c", "record_id": "flaws_cloudtrail:0000243:64ca130a-2b29-42b2-a1d9-16d172e0841c", "row_index": 243, "timestamp": "2018-12-25T20:49:15Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "64ca130a-2b29-42b2-a1d9-16d172e0841c", "eventTime": "2018-12-25T20:49:15Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "824eee4f-5011-423b-8b3b-5c5b299f0c6b", "record_id": "flaws_cloudtrail:0000244:824eee4f-5011-423b-8b3b-5c5b299f0c6b", "row_index": 244, "timestamp": "2018-12-25T20:49:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "824eee4f-5011-423b-8b3b-5c5b299f0c6b", "eventTime": "2018-12-25T20:49:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a7bfe5dc-3e21-4a7d-9ba3-93a0730b35c3", "record_id": "flaws_cloudtrail:0000245:a7bfe5dc-3e21-4a7d-9ba3-93a0730b35c3", "row_index": 245, "timestamp": "2018-12-25T20:49:17Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a7bfe5dc-3e21-4a7d-9ba3-93a0730b35c3", "eventTime": "2018-12-25T20:49:17Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "25443b04-3792-4e57-9ccb-82b70c1ea7fb", "record_id": "flaws_cloudtrail:0000246:25443b04-3792-4e57-9ccb-82b70c1ea7fb", "row_index": 246, "timestamp": "2018-12-25T20:49:18Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "25443b04-3792-4e57-9ccb-82b70c1ea7fb", "eventTime": "2018-12-25T20:49:18Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2def0c94-8422-42b6-85b7-b9d0e210f43d", "record_id": "flaws_cloudtrail:0000247:2def0c94-8422-42b6-85b7-b9d0e210f43d", "row_index": 247, "timestamp": "2018-12-25T20:49:19Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2def0c94-8422-42b6-85b7-b9d0e210f43d", "eventTime": "2018-12-25T20:49:19Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f9c64c3-375a-49cd-8715-414f5e3ce8a9", "record_id": "flaws_cloudtrail:0000248:7f9c64c3-375a-49cd-8715-414f5e3ce8a9", "row_index": 248, "timestamp": "2018-12-25T20:49:20Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f9c64c3-375a-49cd-8715-414f5e3ce8a9", "eventTime": "2018-12-25T20:49:20Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ae422a0d-a620-4edb-bcf3-3c639fb2caf2", "record_id": "flaws_cloudtrail:0000249:ae422a0d-a620-4edb-bcf3-3c639fb2caf2", "row_index": 249, "timestamp": "2018-12-25T20:49:21Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ae422a0d-a620-4edb-bcf3-3c639fb2caf2", "eventTime": "2018-12-25T20:49:21Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "481884a-506e-4a58-a775-27f2fdeb10e2", "record_id": "flaws_cloudtrail:0000250:481884a-506e-4a58-a775-27f2fdeb10e2", "row_index": 250, "timestamp": "2018-12-25T20:49:22Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "481884a-506e-4a58-a775-27f2fdeb10e2", "eventTime": "2018-12-25T20:49:22Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "74e8358f-5641-450c-9613-0e63b08e203a", "record_id": "flaws_cloudtrail:0000251:74e8358f-5641-450c-9613-0e63b08e203a", "row_index": 251, "timestamp": "2018-12-25T20:49:24Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "74e8358f-5641-450c-9613-0e63b08e203a", "eventTime": "2018-12-25T20:49:24Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56516e0-26b7-4ef3-b9f7-d2f158a26edc", "record_id": "flaws_cloudtrail:0000252:56516e0-26b7-4ef3-b9f7-d2f158a26edc", "row_index": 252, "timestamp": "2018-12-25T20:49:25Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56516e0-26b7-4ef3-b9f7-d2f158a26edc", "eventTime": "2018-12-25T20:49:25Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bb5150a9-793a-4e9c-b311-225d321c9b3c", "record_id": "flaws_cloudtrail:0000253:bb5150a9-793a-4e9c-b311-225d321c9b3c", "row_index": 253, "timestamp": "2018-12-25T20:49:26Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bb5150a9-793a-4e9c-b311-225d321c9b3c", "eventTime": "2018-12-25T20:49:26Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "006c9548-abcd-46e9-abd4-f3cd47772ac7", "record_id": "flaws_cloudtrail:0000254:006c9548-abcd-46e9-abd4-f3cd47772ac7", "row_index": 254, "timestamp": "2018-12-25T20:49:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 742, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "006c9548-abcd-46e9-abd4-f3cd47772ac7", "eventTime": "2018-12-25T20:49:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4c184230-a5d1-41bb-b915-b85825c71", "record_id": "flaws_cloudtrail:0000255:4c184230-a5d1-41bb-b915-b85825c71", "row_index": 255, "timestamp": "2018-12-25T20:49:29Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4c184230-a5d1-41bb-b915-b85825c71", "eventTime": "2018-12-25T20:49:29Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9e173ce-2596-43bb-a880-1d841653d387", "record_id": "flaws_cloudtrail:0000256:a9e173ce-2596-43bb-a880-1d841653d387", "row_index": 256, "timestamp": "2018-12-25T20:49:30Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9e173ce-2596-43bb-a880-1d841653d387", "eventTime": "2018-12-25T20:49:30Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "269d5ea7-0bdc-49b5-8eed-d75de61d9eb7", "record_id": "flaws_cloudtrail:0000257:269d5ea7-0bdc-49b5-8eed-d75de61d9eb7", "row_index": 257, "timestamp": "2018-12-25T20:49:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "269d5ea7-0bdc-49b5-8eed-d75de61d9eb7", "eventTime": "2018-12-25T20:49:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8b73aac9-240f-4b4f-bb29-d54ac52f7abe", "record_id": "flaws_cloudtrail:0000258:8b73aac9-240f-4b4f-bb29-d54ac52f7abe", "row_index": 258, "timestamp": "2018-12-25T20:49:31Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8b73aac9-240f-4b4f-bb29-d54ac52f7abe", "eventTime": "2018-12-25T20:49:31Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8070bf7f-75ea-4ce2-811d-8ee26cf88b90", "record_id": "flaws_cloudtrail:0000259:8070bf7f-75ea-4ce2-811d-8ee26cf88b90", "row_index": 259, "timestamp": "2018-12-25T20:49:32Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8070bf7f-75ea-4ce2-811d-8ee26cf88b90", "eventTime": "2018-12-25T20:49:32Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "587e0700-9a23-4a6d-b4ca-9bc741108160", "record_id": "flaws_cloudtrail:0000260:587e0700-9a23-4a6d-b4ca-9bc741108160", "row_index": 260, "timestamp": "2018-12-25T20:49:34Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "587e0700-9a23-4a6d-b4ca-9bc741108160", "eventTime": "2018-12-25T20:49:34Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaeffe92-c94f-4942-a390-aaa2d9d4521c", "record_id": "flaws_cloudtrail:0000261:aaeffe92-c94f-4942-a390-aaa2d9d4521c", "row_index": 261, "timestamp": "2018-12-25T20:49:36Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaeffe92-c94f-4942-a390-aaa2d9d4521c", "eventTime": "2018-12-25T20:49:36Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "328f5642-5b4c-4365-bfa2-b01906cc9", "record_id": "flaws_cloudtrail:0000262:328f5642-5b4c-4365-bfa2-b01906cc9", "row_index": 262, "timestamp": "2018-12-25T20:49:37Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 706, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "328f5642-5b4c-4365-bfa2-b01906cc9", "eventTime": "2018-12-25T20:49:37Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a0b5fa41-bc0d-4674-bc3e-3256528a216c", "record_id": "flaws_cloudtrail:0000263:a0b5fa41-bc0d-4674-bc3e-3256528a216c", "row_index": 263, "timestamp": "2018-12-25T20:49:38Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a0b5fa41-bc0d-4674-bc3e-3256528a216c", "eventTime": "2018-12-25T20:49:38Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afaa323a-f854-41ab-8294-d8f69402a83c", "record_id": "flaws_cloudtrail:0000264:afaa323a-f854-41ab-8294-d8f69402a83c", "row_index": 264, "timestamp": "2018-12-25T20:49:40Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afaa323a-f854-41ab-8294-d8f69402a83c", "eventTime": "2018-12-25T20:49:40Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b802391-f4bc-4433-a8c6-64dfcf43f4b3", "record_id": "flaws_cloudtrail:0000265:b802391-f4bc-4433-a8c6-64dfcf43f4b3", "row_index": 265, "timestamp": "2018-12-25T20:49:42Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b802391-f4bc-4433-a8c6-64dfcf43f4b3", "eventTime": "2018-12-25T20:49:42Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9b7da5c1-80a4-47ed-ac1b-e2a8e832fdad", "record_id": "flaws_cloudtrail:0000266:9b7da5c1-80a4-47ed-ac1b-e2a8e832fdad", "row_index": 266, "timestamp": "2018-12-25T20:49:43Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9b7da5c1-80a4-47ed-ac1b-e2a8e832fdad", "eventTime": "2018-12-25T20:49:43Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6eabe7ef-7011-4581-952f-b32fc296b3d4", "record_id": "flaws_cloudtrail:0000267:6eabe7ef-7011-4581-952f-b32fc296b3d4", "row_index": 267, "timestamp": "2018-12-25T20:49:44Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6eabe7ef-7011-4581-952f-b32fc296b3d4", "eventTime": "2018-12-25T20:49:44Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "547a043a-5add-488a-9bb2-becdbf461cdd", "record_id": "flaws_cloudtrail:0000268:547a043a-5add-488a-9bb2-becdbf461cdd", "row_index": 268, "timestamp": "2018-12-25T20:49:45Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "547a043a-5add-488a-9bb2-becdbf461cdd", "eventTime": "2018-12-25T20:49:45Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5dee38d4-d081-4d9b-9442-388ecc205a63", "record_id": "flaws_cloudtrail:0000269:5dee38d4-d081-4d9b-9442-388ecc205a63", "row_index": 269, "timestamp": "2018-12-25T20:49:46Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5dee38d4-d081-4d9b-9442-388ecc205a63", "eventTime": "2018-12-25T20:49:46Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "842e0857-56db-4e94-9b78-9ad852d0cdb6", "record_id": "flaws_cloudtrail:0000270:842e0857-56db-4e94-9b78-9ad852d0cdb6", "row_index": 270, "timestamp": "2018-12-25T20:49:48Z", "event_type": "DescribeInstances", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "842e0857-56db-4e94-9b78-9ad852d0cdb6", "eventTime": "2018-12-25T20:49:48Z", "eventName": "DescribeInstances", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"instancesSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af912bc6-7619-4b8a-ace7-cfda5a6fdc54", "record_id": "flaws_cloudtrail:0000271:af912bc6-7619-4b8a-ace7-cfda5a6fdc54", "row_index": 271, "timestamp": "2018-12-25T20:49:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af912bc6-7619-4b8a-ace7-cfda5a6fdc54", "eventTime": "2018-12-25T20:49:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ad51fff-5ad6-46c9-bad1-5cab4c5e90f1", "record_id": "flaws_cloudtrail:0000272:9ad51fff-5ad6-46c9-bad1-5cab4c5e90f1", "row_index": 272, "timestamp": "2018-12-25T20:49:50Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ad51fff-5ad6-46c9-bad1-5cab4c5e90f1", "eventTime": "2018-12-25T20:49:50Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "100ab091-6e8a-4227-b4f8-e4736ec2ae2b", "record_id": "flaws_cloudtrail:0000273:100ab091-6e8a-4227-b4f8-e4736ec2ae2b", "row_index": 273, "timestamp": "2018-12-25T20:49:50Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "100ab091-6e8a-4227-b4f8-e4736ec2ae2b", "eventTime": "2018-12-25T20:49:50Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3fbe1c07-5da9-4ece-9e36-76e7971fcfd7", "record_id": "flaws_cloudtrail:0000274:3fbe1c07-5da9-4ece-9e36-76e7971fcfd7", "row_index": 274, "timestamp": "2018-12-25T20:49:51Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3fbe1c07-5da9-4ece-9e36-76e7971fcfd7", "eventTime": "2018-12-25T20:49:51Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "597132e-2614-47c0-a827-4188c3599c7f", "record_id": "flaws_cloudtrail:0000275:597132e-2614-47c0-a827-4188c3599c7f", "row_index": 275, "timestamp": "2018-12-25T20:49:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "597132e-2614-47c0-a827-4188c3599c7f", "eventTime": "2018-12-25T20:49:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "515db1d1-457b-40b5-a855-6dfe633e7157", "record_id": "flaws_cloudtrail:0000276:515db1d1-457b-40b5-a855-6dfe633e7157", "row_index": 276, "timestamp": "2018-12-25T20:49:54Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "515db1d1-457b-40b5-a855-6dfe633e7157", "eventTime": "2018-12-25T20:49:54Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6438a249-e0a5-4137-a696-228eaa57cdaa", "record_id": "flaws_cloudtrail:0000277:6438a249-e0a5-4137-a696-228eaa57cdaa", "row_index": 277, "timestamp": "2018-12-25T20:49:55Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6438a249-e0a5-4137-a696-228eaa57cdaa", "eventTime": "2018-12-25T20:49:55Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "29860f-5ba4-4744-a01d-d88a9aeffd47", "record_id": "flaws_cloudtrail:0000278:29860f-5ba4-4744-a01d-d88a9aeffd47", "row_index": 278, "timestamp": "2018-12-25T20:49:57Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 694, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "29860f-5ba4-4744-a01d-d88a9aeffd47", "eventTime": "2018-12-25T20:49:57Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d94ba061-79d3-48cc-a875-e7e660952a", "record_id": "flaws_cloudtrail:0000279:d94ba061-79d3-48cc-a875-e7e660952a", "row_index": 279, "timestamp": "2018-12-25T20:49:58Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d94ba061-79d3-48cc-a875-e7e660952a", "eventTime": "2018-12-25T20:49:58Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a30108e-c485-40c1-ac23-a716345ee544", "record_id": "flaws_cloudtrail:0000280:1a30108e-c485-40c1-ac23-a716345ee544", "row_index": 280, "timestamp": "2018-12-25T20:50:00Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a30108e-c485-40c1-ac23-a716345ee544", "eventTime": "2018-12-25T20:50:00Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "77ef7776-b632-472b-b987-4cdab9b35f8d", "record_id": "flaws_cloudtrail:0000281:77ef7776-b632-472b-b987-4cdab9b35f8d", "row_index": 281, "timestamp": "2018-12-25T20:50:01Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "77ef7776-b632-472b-b987-4cdab9b35f8d", "eventTime": "2018-12-25T20:50:01Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "602535d-c77b-4fc6-8bd4-22866b4074", "record_id": "flaws_cloudtrail:0000282:602535d-c77b-4fc6-8bd4-22866b4074", "row_index": 282, "timestamp": "2018-12-25T20:50:02Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "602535d-c77b-4fc6-8bd4-22866b4074", "eventTime": "2018-12-25T20:50:02Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "32836a80-d428-4738-8634-26c145858dfc0", "record_id": "flaws_cloudtrail:0000283:32836a80-d428-4738-8634-26c145858dfc0", "row_index": 283, "timestamp": "2018-12-25T20:50:03Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "32836a80-d428-4738-8634-26c145858dfc0", "eventTime": "2018-12-25T20:50:03Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7fee9c7e-f323-4307-8d5a-e498f366a988", "record_id": "flaws_cloudtrail:0000284:7fee9c7e-f323-4307-8d5a-e498f366a988", "row_index": 284, "timestamp": "2018-12-25T20:50:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7fee9c7e-f323-4307-8d5a-e498f366a988", "eventTime": "2018-12-25T20:50:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "99ad75e0-c490-45b6-89ff-5449d537fdfb", "record_id": "flaws_cloudtrail:0000285:99ad75e0-c490-45b6-89ff-5449d537fdfb", "row_index": 285, "timestamp": "2018-12-25T20:50:06Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "99ad75e0-c490-45b6-89ff-5449d537fdfb", "eventTime": "2018-12-25T20:50:06Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0b4f80fe-cfab-49b6-a687-ce959d8323d2", "record_id": "flaws_cloudtrail:0000286:0b4f80fe-cfab-49b6-a687-ce959d8323d2", "row_index": 286, "timestamp": "2018-12-25T20:50:07Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0b4f80fe-cfab-49b6-a687-ce959d8323d2", "eventTime": "2018-12-25T20:50:07Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "862457-0f8a-4ad1-9fc2-b5d7572cd04c", "record_id": "flaws_cloudtrail:0000287:862457-0f8a-4ad1-9fc2-b5d7572cd04c", "row_index": 287, "timestamp": "2018-12-25T20:50:08Z", "event_type": "ListRoles", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "862457-0f8a-4ad1-9fc2-b5d7572cd04c", "eventTime": "2018-12-25T20:50:08Z", "eventName": "ListRoles", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9a6e872-4b8b-4004-abb4-bd5f5d1fd168", "record_id": "flaws_cloudtrail:0000288:a9a6e872-4b8b-4004-abb4-bd5f5d1fd168", "row_index": 288, "timestamp": "2018-12-25T20:50:09Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9a6e872-4b8b-4004-abb4-bd5f5d1fd168", "eventTime": "2018-12-25T20:50:09Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6de421e8-9d72-43ba-a7cb-0c3fe3c54e88", "record_id": "flaws_cloudtrail:0000289:6de421e8-9d72-43ba-a7cb-0c3fe3c54e88", "row_index": 289, "timestamp": "2018-12-25T20:50:10Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6de421e8-9d72-43ba-a7cb-0c3fe3c54e88", "eventTime": "2018-12-25T20:50:10Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b89132a-bb80-4d7c-89cd-9dfb072c55f1", "record_id": "flaws_cloudtrail:0000290:3b89132a-bb80-4d7c-89cd-9dfb072c55f1", "row_index": 290, "timestamp": "2018-12-25T20:50:19Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b89132a-bb80-4d7c-89cd-9dfb072c55f1", "eventTime": "2018-12-25T20:50:19Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "697bf192-704c-490e-b064-f79a9818b0ad", "record_id": "flaws_cloudtrail:0000291:697bf192-704c-490e-b064-f79a9818b0ad", "row_index": 291, "timestamp": "2018-12-25T20:50:19Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "697bf192-704c-490e-b064-f79a9818b0ad", "eventTime": "2018-12-25T20:50:19Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71c9f388-f1fd-4723-8202-f1df62e4ea9f", "record_id": "flaws_cloudtrail:0000292:71c9f388-f1fd-4723-8202-f1df62e4ea9f", "row_index": 292, "timestamp": "2018-12-25T20:50:20Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71c9f388-f1fd-4723-8202-f1df62e4ea9f", "eventTime": "2018-12-25T20:50:20Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b80049-45fc-4f52-aae9-32c83512", "record_id": "flaws_cloudtrail:0000293:b80049-45fc-4f52-aae9-32c83512", "row_index": 293, "timestamp": "2018-12-25T20:50:21Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b80049-45fc-4f52-aae9-32c83512", "eventTime": "2018-12-25T20:50:21Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8ee34dba-6076-495c-864d-262edef3ce94", "record_id": "flaws_cloudtrail:0000294:8ee34dba-6076-495c-864d-262edef3ce94", "row_index": 294, "timestamp": "2018-12-25T20:50:23Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8ee34dba-6076-495c-864d-262edef3ce94", "eventTime": "2018-12-25T20:50:23Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fa940042-e99f-48f9-9130-e1b798a0ba3f", "record_id": "flaws_cloudtrail:0000295:8fa940042-e99f-48f9-9130-e1b798a0ba3f", "row_index": 295, "timestamp": "2018-12-25T20:50:24Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fa940042-e99f-48f9-9130-e1b798a0ba3f", "eventTime": "2018-12-25T20:50:24Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1c1481e1-63f4-4547-b589-ac5c10881ad", "record_id": "flaws_cloudtrail:0000296:1c1481e1-63f4-4547-b589-ac5c10881ad", "row_index": 296, "timestamp": "2018-12-25T20:50:25Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 703, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1c1481e1-63f4-4547-b589-ac5c10881ad", "eventTime": "2018-12-25T20:50:25Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b71fd9a-ff3d-4718-ba72-73d3279a93f4", "record_id": "flaws_cloudtrail:0000297:4b71fd9a-ff3d-4718-ba72-73d3279a93f4", "row_index": 297, "timestamp": "2018-12-25T20:50:27Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 704, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b71fd9a-ff3d-4718-ba72-73d3279a93f4", "eventTime": "2018-12-25T20:50:27Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "71bd3ae0-928d-48b3-a71a-79f7b3bd6885", "record_id": "flaws_cloudtrail:0000298:71bd3ae0-928d-48b3-a71a-79f7b3bd6885", "row_index": 298, "timestamp": "2018-12-25T20:50:28Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "71bd3ae0-928d-48b3-a71a-79f7b3bd6885", "eventTime": "2018-12-25T20:50:28Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4bf534ea-9155-42cf-82d4-9ceb21bfdee7", "record_id": "flaws_cloudtrail:0000299:4bf534ea-9155-42cf-82d4-9ceb21bfdee7", "row_index": 299, "timestamp": "2018-12-25T20:50:29Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4bf534ea-9155-42cf-82d4-9ceb21bfdee7", "eventTime": "2018-12-25T20:50:29Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2ec88a3f-0f15-40c4-ae30-e9e3c090e0c5", "record_id": "flaws_cloudtrail:0000300:2ec88a3f-0f15-40c4-ae30-e9e3c090e0c5", "row_index": 300, "timestamp": "2018-12-25T20:50:30Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2ec88a3f-0f15-40c4-ae30-e9e3c090e0c5", "eventTime": "2018-12-25T20:50:30Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40abf556-b801-4c10-bf79-06dde2cb0ef7", "record_id": "flaws_cloudtrail:0000301:40abf556-b801-4c10-bf79-06dde2cb0ef7", "row_index": 301, "timestamp": "2018-12-25T20:50:31Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40abf556-b801-4c10-bf79-06dde2cb0ef7", "eventTime": "2018-12-25T20:50:31Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a6f8442-ab96-4d53-a5f0-e486b585968c", "record_id": "flaws_cloudtrail:0000302:7a6f8442-ab96-4d53-a5f0-e486b585968c", "row_index": 302, "timestamp": "2018-12-25T20:50:32Z", "event_type": "ListDetectors", "event_source": "guardduty.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a6f8442-ab96-4d53-a5f0-e486b585968c", "eventTime": "2018-12-25T20:50:32Z", "eventName": "ListDetectors", "eventSource": "guardduty.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1a15008-1112-47f4-b639-0e0918b32fd2", "record_id": "flaws_cloudtrail:0000303:1a15008-1112-47f4-b639-0e0918b32fd2", "row_index": 303, "timestamp": "2018-12-25T20:50:33Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1a15008-1112-47f4-b639-0e0918b32fd2", "eventTime": "2018-12-25T20:50:33Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dcec741-1a84-420d-bdae-5b127ad0aad0", "record_id": "flaws_cloudtrail:0000304:3dcec741-1a84-420d-bdae-5b127ad0aad0", "row_index": 304, "timestamp": "2018-12-25T20:50:34Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dcec741-1a84-420d-bdae-5b127ad0aad0", "eventTime": "2018-12-25T20:50:34Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a1d4c2f-010f-4e65-a8fa-4bfb05506f9e", "record_id": "flaws_cloudtrail:0000305:5a1d4c2f-010f-4e65-a8fa-4bfb05506f9e", "row_index": 305, "timestamp": "2018-12-25T20:50:35Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a1d4c2f-010f-4e65-a8fa-4bfb05506f9e", "eventTime": "2018-12-25T20:50:35Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33eda61e-75da-48e3-8ce5-b228d2320a2e", "record_id": "flaws_cloudtrail:0000306:33eda61e-75da-48e3-8ce5-b228d2320a2e", "row_index": 306, "timestamp": "2018-12-25T20:50:36Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33eda61e-75da-48e3-8ce5-b228d2320a2e", "eventTime": "2018-12-25T20:50:36Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b5c23f4d-2ed3-4275-8d11-af7ed78962b2", "record_id": "flaws_cloudtrail:0000307:b5c23f4d-2ed3-4275-8d11-af7ed78962b2", "row_index": 307, "timestamp": "2018-12-25T20:50:37Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b5c23f4d-2ed3-4275-8d11-af7ed78962b2", "eventTime": "2018-12-25T20:50:37Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7a347ec8-c828-4bfa-b4c1-927c5fb3bb12", "record_id": "flaws_cloudtrail:0000308:7a347ec8-c828-4bfa-b4c1-927c5fb3bb12", "row_index": 308, "timestamp": "2018-12-25T20:50:38Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7a347ec8-c828-4bfa-b4c1-927c5fb3bb12", "eventTime": "2018-12-25T20:50:38Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e534ab66-0ce0-4900-97ff-1f07d19d57e6", "record_id": "flaws_cloudtrail:0000309:e534ab66-0ce0-4900-97ff-1f07d19d57e6", "row_index": 309, "timestamp": "2018-12-25T20:50:39Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e534ab66-0ce0-4900-97ff-1f07d19d57e6", "eventTime": "2018-12-25T20:50:39Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "db00f2b3-a1df-45a5-9ce8-4db3b4b3cebf", "record_id": "flaws_cloudtrail:0000310:db00f2b3-a1df-45a5-9ce8-4db3b4b3cebf", "row_index": 310, "timestamp": "2018-12-25T20:50:40Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "db00f2b3-a1df-45a5-9ce8-4db3b4b3cebf", "eventTime": "2018-12-25T20:50:40Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81cd5382-64f7-4620-8766-ae6c2d89ef67", "record_id": "flaws_cloudtrail:0000311:81cd5382-64f7-4620-8766-ae6c2d89ef67", "row_index": 311, "timestamp": "2018-12-25T20:50:41Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81cd5382-64f7-4620-8766-ae6c2d89ef67", "eventTime": "2018-12-25T20:50:41Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8c245217f-0552-44cd-8b5f-85edb9a0add5", "record_id": "flaws_cloudtrail:0000312:8c245217f-0552-44cd-8b5f-85edb9a0add5", "row_index": 312, "timestamp": "2018-12-25T20:50:42Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8c245217f-0552-44cd-8b5f-85edb9a0add5", "eventTime": "2018-12-25T20:50:42Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1602b26c-ae49-4ccd-9e95-437ed724312", "record_id": "flaws_cloudtrail:0000313:1602b26c-ae49-4ccd-9e95-437ed724312", "row_index": 313, "timestamp": "2018-12-25T20:50:43Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1602b26c-ae49-4ccd-9e95-437ed724312", "eventTime": "2018-12-25T20:50:43Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4ebe4865-d2ea-4f88-bb2a-d67fd076ae28", "record_id": "flaws_cloudtrail:0000314:4ebe4865-d2ea-4f88-bb2a-d67fd076ae28", "row_index": 314, "timestamp": "2018-12-25T20:50:43Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4ebe4865-d2ea-4f88-bb2a-d67fd076ae28", "eventTime": "2018-12-25T20:50:43Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73ae6907-14ae-4a40-99fd-e644a2a350f9", "record_id": "flaws_cloudtrail:0000315:73ae6907-14ae-4a40-99fd-e644a2a350f9", "row_index": 315, "timestamp": "2018-12-25T20:50:44Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73ae6907-14ae-4a40-99fd-e644a2a350f9", "eventTime": "2018-12-25T20:50:44Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cac9ddf4-9273-401d-8050-bd34b3562cc3", "record_id": "flaws_cloudtrail:0000316:cac9ddf4-9273-401d-8050-bd34b3562cc3", "row_index": 316, "timestamp": "2018-12-25T20:50:45Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cac9ddf4-9273-401d-8050-bd34b3562cc3", "eventTime": "2018-12-25T20:50:45Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f1362a86-d103-4fec-85be-28244d361e5b", "record_id": "flaws_cloudtrail:0000317:f1362a86-d103-4fec-85be-28244d361e5b", "row_index": 317, "timestamp": "2018-12-25T20:50:46Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f1362a86-d103-4fec-85be-28244d361e5b", "eventTime": "2018-12-25T20:50:46Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97e3aa7a-3c8a-4ff4-ae8b-9ee3371a51f9", "record_id": "flaws_cloudtrail:0000318:97e3aa7a-3c8a-4ff4-ae8b-9ee3371a51f9", "row_index": 318, "timestamp": "2018-12-25T20:50:47Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97e3aa7a-3c8a-4ff4-ae8b-9ee3371a51f9", "eventTime": "2018-12-25T20:50:47Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "797788d-df94-46cf-ac00-797496a4d32", "record_id": "flaws_cloudtrail:0000319:797788d-df94-46cf-ac00-797496a4d32", "row_index": 319, "timestamp": "2018-12-25T20:50:48Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "797788d-df94-46cf-ac00-797496a4d32", "eventTime": "2018-12-25T20:50:48Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e960aa08-34bb-4bf1-9125-1ec8a4fc91a6", "record_id": "flaws_cloudtrail:0000320:e960aa08-34bb-4bf1-9125-1ec8a4fc91a6", "row_index": 320, "timestamp": "2018-12-25T20:50:49Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e960aa08-34bb-4bf1-9125-1ec8a4fc91a6", "eventTime": "2018-12-25T20:50:49Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "11097-8bd8-43cb-9cca-8cf6089450f7", "record_id": "flaws_cloudtrail:0000321:11097-8bd8-43cb-9cca-8cf6089450f7", "row_index": 321, "timestamp": "2018-12-25T20:50:50Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "11097-8bd8-43cb-9cca-8cf6089450f7", "eventTime": "2018-12-25T20:50:50Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0deb6abf-f46f-4420-897d-25236c2b12ed", "record_id": "flaws_cloudtrail:0000322:0deb6abf-f46f-4420-897d-25236c2b12ed", "row_index": 322, "timestamp": "2018-12-25T20:50:50Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0deb6abf-f46f-4420-897d-25236c2b12ed", "eventTime": "2018-12-25T20:50:50Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "21b911c5-11fb-4bbb-80d7-a3b0553b2b67", "record_id": "flaws_cloudtrail:0000323:21b911c5-11fb-4bbb-80d7-a3b0553b2b67", "row_index": 323, "timestamp": "2018-12-25T20:50:50Z", "event_type": "UpdateTrail", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIAC82BFKLHI5UW4S2Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "133.44.33.176", "user_agent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "aws_region": "us-west-2"}, "resource_arns": ["arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1818"], "raw_record_size_bytes": 714, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "requestParameters", "resources", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "21b911c5-11fb-4bbb-80d7-a3b0553b2b67", "eventTime": "2018-12-25T20:50:50Z", "eventName": "UpdateTrail", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "133.44.33.176", "userAgent": "Boto3/1.14.7 Python/3.6.10 Linux/4.14.181-142.260.amzn2.x86_64 Botocore/1.17.7", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIAC82BFKLHI5UW4S2Q", "userName": "Level6"}, "requestParameters": {"name": "trail-1818", "isMultiRegionTrail": false, "enableLogFileValidation": false}, "resources": [{"ARN": "arn:aws:cloudtrail:us-west-2:811596193553:trail/trail-1818"}]}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40dd84fe-b592-4fcd-b2f2-e3e087f2b8be", "record_id": "flaws_cloudtrail:0000324:40dd84fe-b592-4fcd-b2f2-e3e087f2b8be", "row_index": 324, "timestamp": "2018-12-25T20:50:51Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40dd84fe-b592-4fcd-b2f2-e3e087f2b8be", "eventTime": "2018-12-25T20:50:51Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e73c76dd-317f-493f-8bad-2242224c5948", "record_id": "flaws_cloudtrail:0000325:e73c76dd-317f-493f-8bad-2242224c5948", "row_index": 325, "timestamp": "2018-12-25T20:50:53Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e73c76dd-317f-493f-8bad-2242224c5948", "eventTime": "2018-12-25T20:50:53Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e3354cb8-2ed4-4e30-a85f-289dc331bfcc", "record_id": "flaws_cloudtrail:0000326:e3354cb8-2ed4-4e30-a85f-289dc331bfcc", "row_index": 326, "timestamp": "2018-12-25T20:50:55Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e3354cb8-2ed4-4e30-a85f-289dc331bfcc", "eventTime": "2018-12-25T20:50:55Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "052047f-6c43-4e35-bb50-f44fccba88be", "record_id": "flaws_cloudtrail:0000327:052047f-6c43-4e35-bb50-f44fccba88be", "row_index": 327, "timestamp": "2018-12-25T20:50:56Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "052047f-6c43-4e35-bb50-f44fccba88be", "eventTime": "2018-12-25T20:50:56Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "eaba49dc-bce6-4fa0-bf03-7daeee42088c", "record_id": "flaws_cloudtrail:0000328:eaba49dc-bce6-4fa0-bf03-7daeee42088c", "row_index": 328, "timestamp": "2018-12-25T20:50:58Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "eaba49dc-bce6-4fa0-bf03-7daeee42088c", "eventTime": "2018-12-25T20:50:58Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b27127b-1c0b-4d3a-ad1a-bb721455268f", "record_id": "flaws_cloudtrail:0000329:b27127b-1c0b-4d3a-ad1a-bb721455268f", "row_index": 329, "timestamp": "2018-12-25T20:51:00Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b27127b-1c0b-4d3a-ad1a-bb721455268f", "eventTime": "2018-12-25T20:51:00Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "750373e78-dccb-4a68-8663-dd0e718a4970", "record_id": "flaws_cloudtrail:0000330:750373e78-dccb-4a68-8663-dd0e718a4970", "row_index": 330, "timestamp": "2018-12-25T20:51:02Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "750373e78-dccb-4a68-8663-dd0e718a4970", "eventTime": "2018-12-25T20:51:02Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31a0086b-a741-49f9-85bb-26ad86be07c2", "record_id": "flaws_cloudtrail:0000331:31a0086b-a741-49f9-85bb-26ad86be07c2", "row_index": 331, "timestamp": "2018-12-25T20:51:03Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31a0086b-a741-49f9-85bb-26ad86be07c2", "eventTime": "2018-12-25T20:51:03Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e00cfcf4-6a25-4724-a82b-34f06ad8a691", "record_id": "flaws_cloudtrail:0000332:e00cfcf4-6a25-4724-a82b-34f06ad8a691", "row_index": 332, "timestamp": "2018-12-25T20:51:04Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e00cfcf4-6a25-4724-a82b-34f06ad8a691", "eventTime": "2018-12-25T20:51:04Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e8eedaba-60d7-4005-9cf1-37aed36947", "record_id": "flaws_cloudtrail:0000333:e8eedaba-60d7-4005-9cf1-37aed36947", "row_index": 333, "timestamp": "2018-12-25T20:51:05Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e8eedaba-60d7-4005-9cf1-37aed36947", "eventTime": "2018-12-25T20:51:05Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60d904612-371d-4e33-a632-752174fb8a004", "record_id": "flaws_cloudtrail:0000334:60d904612-371d-4e33-a632-752174fb8a004", "row_index": 334, "timestamp": "2018-12-25T20:51:06Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60d904612-371d-4e33-a632-752174fb8a004", "eventTime": "2018-12-25T20:51:06Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73379c-4b49-4516-97a1-5a07eb4683aa", "record_id": "flaws_cloudtrail:0000335:73379c-4b49-4516-97a1-5a07eb4683aa", "row_index": 335, "timestamp": "2018-12-25T20:51:08Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73379c-4b49-4516-97a1-5a07eb4683aa", "eventTime": "2018-12-25T20:51:08Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97e8fcfb-bc83-4266-b855-9f3cd794aecd", "record_id": "flaws_cloudtrail:0000336:97e8fcfb-bc83-4266-b855-9f3cd794aecd", "row_index": 336, "timestamp": "2018-12-25T20:51:09Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97e8fcfb-bc83-4266-b855-9f3cd794aecd", "eventTime": "2018-12-25T20:51:09Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "254e33c1-3aa0-420c-b41a-3cebd5aa5263", "record_id": "flaws_cloudtrail:0000337:254e33c1-3aa0-420c-b41a-3cebd5aa5263", "row_index": 337, "timestamp": "2018-12-25T20:51:09Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "254e33c1-3aa0-420c-b41a-3cebd5aa5263", "eventTime": "2018-12-25T20:51:09Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a70a8f6-298c-4342-a422-abb501c463c7", "record_id": "flaws_cloudtrail:0000338:4a70a8f6-298c-4342-a422-abb501c463c7", "row_index": 338, "timestamp": "2018-12-25T20:51:10Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a70a8f6-298c-4342-a422-abb501c463c7", "eventTime": "2018-12-25T20:51:10Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e2c02537-da3d-4941-8de8-1a86dc6e01e2", "record_id": "flaws_cloudtrail:0000339:e2c02537-da3d-4941-8de8-1a86dc6e01e2", "row_index": 339, "timestamp": "2018-12-25T20:51:11Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e2c02537-da3d-4941-8de8-1a86dc6e01e2", "eventTime": "2018-12-25T20:51:11Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ee492c97-5285-44c6-a9e4-375b9a363756", "record_id": "flaws_cloudtrail:0000340:ee492c97-5285-44c6-a9e4-375b9a363756", "row_index": 340, "timestamp": "2018-12-25T20:51:11Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 676, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ee492c97-5285-44c6-a9e4-375b9a363756", "eventTime": "2018-12-25T20:51:11Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "40168b05-aecf-4ae4-9b80-9a0a4adc429e", "record_id": "flaws_cloudtrail:0000341:40168b05-aecf-4ae4-9b80-9a0a4adc429e", "row_index": 341, "timestamp": "2018-12-25T20:51:13Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "40168b05-aecf-4ae4-9b80-9a0a4adc429e", "eventTime": "2018-12-25T20:51:13Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "31467-3062-4599-8c2b-872a35f1cf2f", "record_id": "flaws_cloudtrail:0000342:31467-3062-4599-8c2b-872a35f1cf2f", "row_index": 342, "timestamp": "2018-12-25T20:51:14Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "31467-3062-4599-8c2b-872a35f1cf2f", "eventTime": "2018-12-25T20:51:14Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e16e33b2-5654-49cc-9e4c-b3e89fb5ccb1", "record_id": "flaws_cloudtrail:0000343:e16e33b2-5654-49cc-9e4c-b3e89fb5ccb1", "row_index": 343, "timestamp": "2018-12-25T20:51:16Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e16e33b2-5654-49cc-9e4c-b3e89fb5ccb1", "eventTime": "2018-12-25T20:51:16Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02807ef4-1f8d-45d6-997a-f174753dea92", "record_id": "flaws_cloudtrail:0000344:02807ef4-1f8d-45d6-997a-f174753dea92", "row_index": 344, "timestamp": "2018-12-25T20:51:17Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02807ef4-1f8d-45d6-997a-f174753dea92", "eventTime": "2018-12-25T20:51:17Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cf2d1aee-6d87-4ca2-951c-5d38b476c218", "record_id": "flaws_cloudtrail:0000345:cf2d1aee-6d87-4ca2-951c-5d38b476c218", "row_index": 345, "timestamp": "2018-12-25T20:51:18Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cf2d1aee-6d87-4ca2-951c-5d38b476c218", "eventTime": "2018-12-25T20:51:18Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94d7b5f4-69f3-4492-bff2-1192aa79104", "record_id": "flaws_cloudtrail:0000346:94d7b5f4-69f3-4492-bff2-1192aa79104", "row_index": 346, "timestamp": "2018-12-25T20:51:20Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 682, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94d7b5f4-69f3-4492-bff2-1192aa79104", "eventTime": "2018-12-25T20:51:20Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "90138f8-639a-42bb-ac6d-b8c52a0089b2", "record_id": "flaws_cloudtrail:0000347:90138f8-639a-42bb-ac6d-b8c52a0089b2", "row_index": 347, "timestamp": "2018-12-25T20:51:21Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "90138f8-639a-42bb-ac6d-b8c52a0089b2", "eventTime": "2018-12-25T20:51:21Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bfa6a651-9659-447a-b5c7-70be3ad6b45b", "record_id": "flaws_cloudtrail:0000348:bfa6a651-9659-447a-b5c7-70be3ad6b45b", "row_index": 348, "timestamp": "2018-12-25T20:51:22Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bfa6a651-9659-447a-b5c7-70be3ad6b45b", "eventTime": "2018-12-25T20:51:22Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "76e265b6-c39a-4617-9819-ba216e0e47ff", "record_id": "flaws_cloudtrail:0000349:76e265b6-c39a-4617-9819-ba216e0e47ff", "row_index": 349, "timestamp": "2018-12-25T20:51:23Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 679, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "76e265b6-c39a-4617-9819-ba216e0e47ff", "eventTime": "2018-12-25T20:51:23Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "60ff9e8c-7b99-409f-bef8-8882bd6fcfe4", "record_id": "flaws_cloudtrail:0000350:60ff9e8c-7b99-409f-bef8-8882bd6fcfe4", "row_index": 350, "timestamp": "2018-12-25T20:51:24Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "60ff9e8c-7b99-409f-bef8-8882bd6fcfe4", "eventTime": "2018-12-25T20:51:24Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a715da39-25f0-4640-9c2d-26a6b19b3ebe", "record_id": "flaws_cloudtrail:0000351:a715da39-25f0-4640-9c2d-26a6b19b3ebe", "row_index": 351, "timestamp": "2018-12-25T20:51:26Z", "event_type": "ListDomainNames", "event_source": "es.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a715da39-25f0-4640-9c2d-26a6b19b3ebe", "eventTime": "2018-12-25T20:51:26Z", "eventName": "ListDomainNames", "eventSource": "es.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "763911a-965d-4782-a696-77c856137", "record_id": "flaws_cloudtrail:0000352:763911a-965d-4782-a696-77c856137", "row_index": 352, "timestamp": "2018-12-25T20:51:27Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "763911a-965d-4782-a696-77c856137", "eventTime": "2018-12-25T20:51:27Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a52e2275-f242-4f87-b093-0f30c082baa5", "record_id": "flaws_cloudtrail:0000353:a52e2275-f242-4f87-b093-0f30c082baa5", "row_index": 353, "timestamp": "2018-12-25T20:51:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a52e2275-f242-4f87-b093-0f30c082baa5", "eventTime": "2018-12-25T20:51:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aee4cb96-efd7-423d-aca0-2afe1ad4d790", "record_id": "flaws_cloudtrail:0000354:aee4cb96-efd7-423d-aca0-2afe1ad4d790", "row_index": 354, "timestamp": "2018-12-25T20:51:28Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aee4cb96-efd7-423d-aca0-2afe1ad4d790", "eventTime": "2018-12-25T20:51:28Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5e39a3d7-80bf-45a7-a6e0-ebdbd2d84625", "record_id": "flaws_cloudtrail:0000355:5e39a3d7-80bf-45a7-a6e0-ebdbd2d84625", "row_index": 355, "timestamp": "2018-12-25T20:51:29Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5e39a3d7-80bf-45a7-a6e0-ebdbd2d84625", "eventTime": "2018-12-25T20:51:29Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "016d3847-592f-4ba7-9b53-73d594d88212", "record_id": "flaws_cloudtrail:0000356:016d3847-592f-4ba7-9b53-73d594d88212", "row_index": 356, "timestamp": "2018-12-25T20:51:30Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "016d3847-592f-4ba7-9b53-73d594d88212", "eventTime": "2018-12-25T20:51:30Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2762b0c9-9039-46a7-9b9a-466612fe20a1", "record_id": "flaws_cloudtrail:0000357:2762b0c9-9039-46a7-9b9a-466612fe20a1", "row_index": 357, "timestamp": "2018-12-25T20:51:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 745, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2762b0c9-9039-46a7-9b9a-466612fe20a1", "eventTime": "2018-12-25T20:51:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "046d59e4-84d6-428a-a908-56987d0f", "record_id": "flaws_cloudtrail:0000358:046d59e4-84d6-428a-a908-56987d0f", "row_index": 358, "timestamp": "2018-12-25T20:51:31Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "046d59e4-84d6-428a-a908-56987d0f", "eventTime": "2018-12-25T20:51:31Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e08788ff-8f68-4dc3-95e6-7201fee4a333", "record_id": "flaws_cloudtrail:0000359:e08788ff-8f68-4dc3-95e6-7201fee4a333", "row_index": 359, "timestamp": "2018-12-25T20:51:32Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e08788ff-8f68-4dc3-95e6-7201fee4a333", "eventTime": "2018-12-25T20:51:32Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "700b4880-dc8e-402b-92ab-2d7abaf6e113", "record_id": "flaws_cloudtrail:0000360:700b4880-dc8e-402b-92ab-2d7abaf6e113", "row_index": 360, "timestamp": "2018-12-25T20:51:33Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "700b4880-dc8e-402b-92ab-2d7abaf6e113", "eventTime": "2018-12-25T20:51:33Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5cb9a43b-7c58-4b4c-9eb7-d030a2c49c97", "record_id": "flaws_cloudtrail:0000361:5cb9a43b-7c58-4b4c-9eb7-d030a2c49c97", "row_index": 361, "timestamp": "2018-12-25T20:51:33Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5cb9a43b-7c58-4b4c-9eb7-d030a2c49c97", "eventTime": "2018-12-25T20:51:33Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "20cc997e-c067-4026-91ef-b952a0fa2b29", "record_id": "flaws_cloudtrail:0000362:20cc997e-c067-4026-91ef-b952a0fa2b29", "row_index": 362, "timestamp": "2018-12-25T20:51:35Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "20cc997e-c067-4026-91ef-b952a0fa2b29", "eventTime": "2018-12-25T20:51:35Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3dfd46a8-0ad6-4417-9bd8-1cf916077b3d5", "record_id": "flaws_cloudtrail:0000363:3dfd46a8-0ad6-4417-9bd8-1cf916077b3d5", "row_index": 363, "timestamp": "2018-12-25T20:51:36Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3dfd46a8-0ad6-4417-9bd8-1cf916077b3d5", "eventTime": "2018-12-25T20:51:36Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d53fa575-349f-49e7-92e7-4231aa31379", "record_id": "flaws_cloudtrail:0000364:d53fa575-349f-49e7-92e7-4231aa31379", "row_index": 364, "timestamp": "2018-12-25T20:51:38Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d53fa575-349f-49e7-92e7-4231aa31379", "eventTime": "2018-12-25T20:51:38Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f29d3b6-03c5-4fca-9bbd-957d291d0d10", "record_id": "flaws_cloudtrail:0000365:2f29d3b6-03c5-4fca-9bbd-957d291d0d10", "row_index": 365, "timestamp": "2018-12-25T20:51:40Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f29d3b6-03c5-4fca-9bbd-957d291d0d10", "eventTime": "2018-12-25T20:51:40Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16f3c12a-14c3-4fa5-abeb-1a4d5ca88e92", "record_id": "flaws_cloudtrail:0000366:16f3c12a-14c3-4fa5-abeb-1a4d5ca88e92", "row_index": 366, "timestamp": "2018-12-25T20:51:41Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16f3c12a-14c3-4fa5-abeb-1a4d5ca88e92", "eventTime": "2018-12-25T20:51:41Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94a4bf87-363e-4065-b5e6-7eb1e125197", "record_id": "flaws_cloudtrail:0000367:94a4bf87-363e-4065-b5e6-7eb1e125197", "row_index": 367, "timestamp": "2018-12-25T20:51:42Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94a4bf87-363e-4065-b5e6-7eb1e125197", "eventTime": "2018-12-25T20:51:42Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "615e7170-1970-4748-b842-9de26d9f3d11", "record_id": "flaws_cloudtrail:0000368:615e7170-1970-4748-b842-9de26d9f3d11", "row_index": 368, "timestamp": "2018-12-25T20:51:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "615e7170-1970-4748-b842-9de26d9f3d11", "eventTime": "2018-12-25T20:51:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aa8182a0-e64c-4b6c-9b45-2cd1b00781e", "record_id": "flaws_cloudtrail:0000369:aa8182a0-e64c-4b6c-9b45-2cd1b00781e", "row_index": 369, "timestamp": "2018-12-25T20:51:44Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 746, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aa8182a0-e64c-4b6c-9b45-2cd1b00781e", "eventTime": "2018-12-25T20:51:44Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bd594cb-5bb4-477b-b376-fe2801aa0305", "record_id": "flaws_cloudtrail:0000370:7bd594cb-5bb4-477b-b376-fe2801aa0305", "row_index": 370, "timestamp": "2018-12-25T20:51:46Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bd594cb-5bb4-477b-b376-fe2801aa0305", "eventTime": "2018-12-25T20:51:46Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abfa5bee-e05c-4675-8ef6-286851ff6cf6", "record_id": "flaws_cloudtrail:0000371:abfa5bee-e05c-4675-8ef6-286851ff6cf6", "row_index": 371, "timestamp": "2018-12-25T20:51:48Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abfa5bee-e05c-4675-8ef6-286851ff6cf6", "eventTime": "2018-12-25T20:51:48Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48fff971-5b8c-400e-8e2d-9b1544b71d1c", "record_id": "flaws_cloudtrail:0000372:48fff971-5b8c-400e-8e2d-9b1544b71d1c", "row_index": 372, "timestamp": "2018-12-25T20:51:49Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48fff971-5b8c-400e-8e2d-9b1544b71d1c", "eventTime": "2018-12-25T20:51:49Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0ad3a9d1-5164-4fdf-bee8-f32c03213a7f", "record_id": "flaws_cloudtrail:0000373:0ad3a9d1-5164-4fdf-bee8-f32c03213a7f", "row_index": 373, "timestamp": "2018-12-25T20:51:51Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0ad3a9d1-5164-4fdf-bee8-f32c03213a7f", "eventTime": "2018-12-25T20:51:51Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c1f4e304-4caa-4f0a-8b0e-dd7dcea6521b", "record_id": "flaws_cloudtrail:0000374:c1f4e304-4caa-4f0a-8b0e-dd7dcea6521b", "row_index": 374, "timestamp": "2018-12-25T20:51:52Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c1f4e304-4caa-4f0a-8b0e-dd7dcea6521b", "eventTime": "2018-12-25T20:51:52Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a9eb7c7-2a87-40a1-8b7a-855523ebc490", "record_id": "flaws_cloudtrail:0000375:4a9eb7c7-2a87-40a1-8b7a-855523ebc490", "row_index": 375, "timestamp": "2018-12-25T20:51:53Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 747, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a9eb7c7-2a87-40a1-8b7a-855523ebc490", "eventTime": "2018-12-25T20:51:53Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5a3100e1-9887-419b-8fc7-140a3d7a004c", "record_id": "flaws_cloudtrail:0000376:5a3100e1-9887-419b-8fc7-140a3d7a004c", "row_index": 376, "timestamp": "2018-12-25T20:51:53Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5a3100e1-9887-419b-8fc7-140a3d7a004c", "eventTime": "2018-12-25T20:51:53Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "699fccea-001f-4f2b-b62e-4bb893864ce3", "record_id": "flaws_cloudtrail:0000377:699fccea-001f-4f2b-b62e-4bb893864ce3", "row_index": 377, "timestamp": "2018-12-25T20:51:54Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 744, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "699fccea-001f-4f2b-b62e-4bb893864ce3", "eventTime": "2018-12-25T20:51:54Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b85a5dda-ecdb-451a-8884-0b68fff0f163", "record_id": "flaws_cloudtrail:0000378:b85a5dda-ecdb-451a-8884-0b68fff0f163", "row_index": 378, "timestamp": "2018-12-25T20:51:55Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b85a5dda-ecdb-451a-8884-0b68fff0f163", "eventTime": "2018-12-25T20:51:55Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "18d2ccdc-e8f0-4c12-97fd-175fc53494f2", "record_id": "flaws_cloudtrail:0000379:18d2ccdc-e8f0-4c12-97fd-175fc53494f2", "row_index": 379, "timestamp": "2018-12-25T20:51:56Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "18d2ccdc-e8f0-4c12-97fd-175fc53494f2", "eventTime": "2018-12-25T20:51:56Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14f70a02-65bd-428d-a1e8-e908286f5f64", "record_id": "flaws_cloudtrail:0000380:14f70a02-65bd-428d-a1e8-e908286f5f64", "row_index": 380, "timestamp": "2018-12-25T20:51:58Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14f70a02-65bd-428d-a1e8-e908286f5f64", "eventTime": "2018-12-25T20:51:58Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "769f639e-3f86-4ced-a0d8-8e643b2a2e8c", "record_id": "flaws_cloudtrail:0000381:769f639e-3f86-4ced-a0d8-8e643b2a2e8c", "row_index": 381, "timestamp": "2018-12-25T20:51:59Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "769f639e-3f86-4ced-a0d8-8e643b2a2e8c", "eventTime": "2018-12-25T20:51:59Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c4620fc-7a9e-45b2-b5d9-b3dc30894d6", "record_id": "flaws_cloudtrail:0000382:5c4620fc-7a9e-45b2-b5d9-b3dc30894d6", "row_index": 382, "timestamp": "2018-12-25T20:52:00Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c4620fc-7a9e-45b2-b5d9-b3dc30894d6", "eventTime": "2018-12-25T20:52:00Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4b2ac41-3634-46dd-8b85-51cf81365", "record_id": "flaws_cloudtrail:0000383:d4b2ac41-3634-46dd-8b85-51cf81365", "row_index": 383, "timestamp": "2018-12-25T20:52:02Z", "event_type": "DescribeLoadBalancers", "event_source": "elasticloadbalancing.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4b2ac41-3634-46dd-8b85-51cf81365", "eventTime": "2018-12-25T20:52:02Z", "eventName": "DescribeLoadBalancers", "eventSource": "elasticloadbalancing.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"loadBalancers": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a24efac-aed1-488c-a7ae-dfac791a94f0", "record_id": "flaws_cloudtrail:0000384:3a24efac-aed1-488c-a7ae-dfac791a94f0", "row_index": 384, "timestamp": "2018-12-25T20:52:03Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a24efac-aed1-488c-a7ae-dfac791a94f0", "eventTime": "2018-12-25T20:52:03Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "fb710577-bef1-44a5-ac96-7f81d70573", "record_id": "flaws_cloudtrail:0000385:fb710577-bef1-44a5-ac96-7f81d70573", "row_index": 385, "timestamp": "2018-12-25T20:52:05Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "fb710577-bef1-44a5-ac96-7f81d70573", "eventTime": "2018-12-25T20:52:05Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b03e310e-1988-447d-8eb9-aad2b5b0272c", "record_id": "flaws_cloudtrail:0000386:b03e310e-1988-447d-8eb9-aad2b5b0272c", "row_index": 386, "timestamp": "2018-12-25T20:52:07Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b03e310e-1988-447d-8eb9-aad2b5b0272c", "eventTime": "2018-12-25T20:52:07Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1adda996-e94f-4be5-bb0d-dd106f72a703", "record_id": "flaws_cloudtrail:0000387:1adda996-e94f-4be5-bb0d-dd106f72a703", "row_index": 387, "timestamp": "2018-12-25T20:52:10Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 699, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1adda996-e94f-4be5-bb0d-dd106f72a703", "eventTime": "2018-12-25T20:52:10Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "263370f-2916-4875-a940-64655a573442d", "record_id": "flaws_cloudtrail:0000388:263370f-2916-4875-a940-64655a573442d", "row_index": 388, "timestamp": "2018-12-25T20:52:12Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 700, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "263370f-2916-4875-a940-64655a573442d", "eventTime": "2018-12-25T20:52:12Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afd42600-6cbf-4cae-aaa2-f1ca7d1b5433", "record_id": "flaws_cloudtrail:0000389:afd42600-6cbf-4cae-aaa2-f1ca7d1b5433", "row_index": 389, "timestamp": "2018-12-25T20:52:13Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afd42600-6cbf-4cae-aaa2-f1ca7d1b5433", "eventTime": "2018-12-25T20:52:13Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "afa80fae-be07-4c52-82be-f418aa38e1b8", "record_id": "flaws_cloudtrail:0000390:afa80fae-be07-4c52-82be-f418aa38e1b8", "row_index": 390, "timestamp": "2018-12-25T20:52:15Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 741, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "afa80fae-be07-4c52-82be-f418aa38e1b8", "eventTime": "2018-12-25T20:52:15Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4c708273-9cb9-44a4-b965-3356f1d379112", "record_id": "flaws_cloudtrail:0000391:a4c708273-9cb9-44a4-b965-3356f1d379112", "row_index": 391, "timestamp": "2018-12-25T20:52:17Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 743, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4c708273-9cb9-44a4-b965-3356f1d379112", "eventTime": "2018-12-25T20:52:17Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ad765a21-65d3-4ba1-aa87-d556a1d2cedf", "record_id": "flaws_cloudtrail:0000392:ad765a21-65d3-4ba1-aa87-d556a1d2cedf", "row_index": 392, "timestamp": "2018-12-25T20:52:19Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ad765a21-65d3-4ba1-aa87-d556a1d2cedf", "eventTime": "2018-12-25T20:52:19Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a26125c0-f594-40fb-9dac-086287a93b7a", "record_id": "flaws_cloudtrail:0000393:a26125c0-f594-40fb-9dac-086287a93b7a", "row_index": 393, "timestamp": "2018-12-25T20:52:21Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a26125c0-f594-40fb-9dac-086287a93b7a", "eventTime": "2018-12-25T20:52:21Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cd0a3642-60f2-4bb2-baac-f1aea0fc124b", "record_id": "flaws_cloudtrail:0000394:cd0a3642-60f2-4bb2-baac-f1aea0fc124b", "row_index": 394, "timestamp": "2018-12-25T20:52:23Z", "event_type": "GetBucketLogging", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 740, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cd0a3642-60f2-4bb2-baac-f1aea0fc124b", "eventTime": "2018-12-25T20:52:23Z", "eventName": "GetBucketLogging", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"logging": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16905e8-a83f-435d-9afc-6c5efb746a7b", "record_id": "flaws_cloudtrail:0000395:16905e8-a83f-435d-9afc-6c5efb746a7b", "row_index": 395, "timestamp": "2018-12-25T20:52:24Z", "event_type": "ListHostedZones", "event_source": "route53.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 708, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16905e8-a83f-435d-9afc-6c5efb746a7b", "eventTime": "2018-12-25T20:52:24Z", "eventName": "ListHostedZones", "eventSource": "route53.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a712ad41-d5fd-4a5d-aa79-217a244519", "record_id": "flaws_cloudtrail:0000396:a712ad41-d5fd-4a5d-aa79-217a244519", "row_index": 396, "timestamp": "2018-12-25T20:52:25Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a712ad41-d5fd-4a5d-aa79-217a244519", "eventTime": "2018-12-25T20:52:25Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1915efc-1ddb-4df5-963e-61694e2d9bde", "record_id": "flaws_cloudtrail:0000397:e1915efc-1ddb-4df5-963e-61694e2d9bde", "row_index": 397, "timestamp": "2018-12-25T20:52:26Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1915efc-1ddb-4df5-963e-61694e2d9bde", "eventTime": "2018-12-25T20:52:26Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "df7a5dbd-56ad-42a6-b58e-998195abd9f8", "record_id": "flaws_cloudtrail:0000398:df7a5dbd-56ad-42a6-b58e-998195abd9f8", "row_index": 398, "timestamp": "2018-12-25T20:52:27Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "df7a5dbd-56ad-42a6-b58e-998195abd9f8", "eventTime": "2018-12-25T20:52:27Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "59149-339c-4350-87cf-98da96e2e37e", "record_id": "flaws_cloudtrail:0000399:59149-339c-4350-87cf-98da96e2e37e", "row_index": 399, "timestamp": "2018-12-25T20:52:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "59149-339c-4350-87cf-98da96e2e37e", "eventTime": "2018-12-25T20:52:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8634d40a-ec4a-4f1f-869c-019bacf304dd", "record_id": "flaws_cloudtrail:0000400:8634d40a-ec4a-4f1f-869c-019bacf304dd", "row_index": 400, "timestamp": "2018-12-25T20:52:28Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8634d40a-ec4a-4f1f-869c-019bacf304dd", "eventTime": "2018-12-25T20:52:28Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f227fa47-f798-4888-abc9-a2328a125b21", "record_id": "flaws_cloudtrail:0000401:f227fa47-f798-4888-abc9-a2328a125b21", "row_index": 401, "timestamp": "2018-12-25T20:52:30Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f227fa47-f798-4888-abc9-a2328a125b21", "eventTime": "2018-12-25T20:52:30Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a09eef40-062a-443d-b96f-3e2c1c72b3f1", "record_id": "flaws_cloudtrail:0000402:a09eef40-062a-443d-b96f-3e2c1c72b3f1", "row_index": 402, "timestamp": "2018-12-25T20:52:32Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a09eef40-062a-443d-b96f-3e2c1c72b3f1", "eventTime": "2018-12-25T20:52:32Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7c668315a-8769-4329-99ce-9a4bf1234075", "record_id": "flaws_cloudtrail:0000403:7c668315a-8769-4329-99ce-9a4bf1234075", "row_index": 403, "timestamp": "2018-12-25T20:52:34Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7c668315a-8769-4329-99ce-9a4bf1234075", "eventTime": "2018-12-25T20:52:34Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ea1f6ba5-214f-4128-adcb-5e67aa2e3201", "record_id": "flaws_cloudtrail:0000404:ea1f6ba5-214f-4128-adcb-5e67aa2e3201", "row_index": 404, "timestamp": "2018-12-25T20:52:35Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ea1f6ba5-214f-4128-adcb-5e67aa2e3201", "eventTime": "2018-12-25T20:52:35Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3be0052-7025-4e56-b4ea-a44f4f71754a", "record_id": "flaws_cloudtrail:0000405:f3be0052-7025-4e56-b4ea-a44f4f71754a", "row_index": 405, "timestamp": "2018-12-25T20:52:36Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 691, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3be0052-7025-4e56-b4ea-a44f4f71754a", "eventTime": "2018-12-25T20:52:36Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36046fb-7a2d-49c9-baa7-c1414dac59ef", "record_id": "flaws_cloudtrail:0000406:36046fb-7a2d-49c9-baa7-c1414dac59ef", "row_index": 406, "timestamp": "2018-12-25T20:52:38Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 690, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36046fb-7a2d-49c9-baa7-c1414dac59ef", "eventTime": "2018-12-25T20:52:38Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7bcb7231-4fbb-40e9-aac1-fc15aeb344ef", "record_id": "flaws_cloudtrail:0000407:7bcb7231-4fbb-40e9-aac1-fc15aeb344ef", "row_index": 407, "timestamp": "2018-12-25T20:52:39Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 689, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7bcb7231-4fbb-40e9-aac1-fc15aeb344ef", "eventTime": "2018-12-25T20:52:39Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a1233c2f-0ca8-4468-b56e-039a3082b365", "record_id": "flaws_cloudtrail:0000408:a1233c2f-0ca8-4468-b56e-039a3082b365", "row_index": 408, "timestamp": "2018-12-25T20:52:40Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 686, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a1233c2f-0ca8-4468-b56e-039a3082b365", "eventTime": "2018-12-25T20:52:40Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b941aee-a778-4d18-a7c4-7f3cc2332d98", "record_id": "flaws_cloudtrail:0000409:5b941aee-a778-4d18-a7c4-7f3cc2332d98", "row_index": 409, "timestamp": "2018-12-25T20:52:41Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 685, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b941aee-a778-4d18-a7c4-7f3cc2332d98", "eventTime": "2018-12-25T20:52:41Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "103b0cbc-ab7f-4e87-9237-74a1bffa5df0", "record_id": "flaws_cloudtrail:0000410:103b0cbc-ab7f-4e87-9237-74a1bffa5df0", "row_index": 410, "timestamp": "2018-12-25T20:52:43Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 687, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "103b0cbc-ab7f-4e87-9237-74a1bffa5df0", "eventTime": "2018-12-25T20:52:43Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a28483e8-0b19-4198-a69b-d8b5d5fd05e1", "record_id": "flaws_cloudtrail:0000411:a28483e8-0b19-4198-a69b-d8b5d5fd05e1", "row_index": 411, "timestamp": "2018-12-25T20:52:44Z", "event_type": "ListFunctions202224", "event_source": "lambda.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 683, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a28483e8-0b19-4198-a69b-d8b5d5fd05e1", "eventTime": "2018-12-25T20:52:44Z", "eventName": "ListFunctions202224", "eventSource": "lambda.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33d3de77-8d66-48cd-9bba-8dc9a850d930", "record_id": "flaws_cloudtrail:0000412:33d3de77-8d66-48cd-9bba-8dc9a850d930", "row_index": 412, "timestamp": "2018-12-25T20:52:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33d3de77-8d66-48cd-9bba-8dc9a850d930", "eventTime": "2018-12-25T20:52:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "769d858d-5a82-499f-a05d-b6b9bb46cece", "record_id": "flaws_cloudtrail:0000413:769d858d-5a82-499f-a05d-b6b9bb46cece", "row_index": 413, "timestamp": "2018-12-25T20:52:47Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 750, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "769d858d-5a82-499f-a05d-b6b9bb46cece", "eventTime": "2018-12-25T20:52:47Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cee3b1db-0ed8-417d-a889-8b84a1cdd0c6", "record_id": "flaws_cloudtrail:0000414:cee3b1db-0ed8-417d-a889-8b84a1cdd0c6", "row_index": 414, "timestamp": "2018-12-25T20:52:48Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cee3b1db-0ed8-417d-a889-8b84a1cdd0c6", "eventTime": "2018-12-25T20:52:48Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b333fda4-e5c2-4a69-a42b-bbb1f53010a0", "record_id": "flaws_cloudtrail:0000415:b333fda4-e5c2-4a69-a42b-bbb1f53010a0", "row_index": 415, "timestamp": "2018-12-25T20:52:48Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b333fda4-e5c2-4a69-a42b-bbb1f53010a0", "eventTime": "2018-12-25T20:52:48Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b29eddad-489a-49d4-b5bb-43b2c4506cbc", "record_id": "flaws_cloudtrail:0000416:b29eddad-489a-49d4-b5bb-43b2c4506cbc", "row_index": 416, "timestamp": "2018-12-25T20:52:49Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b29eddad-489a-49d4-b5bb-43b2c4506cbc", "eventTime": "2018-12-25T20:52:49Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1887bd59-0a58-4b9d-ba4d-2a87ff1770a6", "record_id": "flaws_cloudtrail:0000417:1887bd59-0a58-4b9d-ba4d-2a87ff1770a6", "row_index": 417, "timestamp": "2018-12-25T20:52:50Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1887bd59-0a58-4b9d-ba4d-2a87ff1770a6", "eventTime": "2018-12-25T20:52:50Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02ddad58-67d3-4506-8f91-8795dc382c7d", "record_id": "flaws_cloudtrail:0000418:02ddad58-67d3-4506-8f91-8795dc382c7d", "row_index": 418, "timestamp": "2018-12-25T20:52:51Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02ddad58-67d3-4506-8f91-8795dc382c7d", "eventTime": "2018-12-25T20:52:51Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8fff3222-9975-4ebf-9942-311ea8ca2b32", "record_id": "flaws_cloudtrail:0000419:8fff3222-9975-4ebf-9942-311ea8ca2b32", "row_index": 419, "timestamp": "2018-12-25T20:52:52Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8fff3222-9975-4ebf-9942-311ea8ca2b32", "eventTime": "2018-12-25T20:52:52Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "42dfff2c-91e0-439f-9063-c256be3f3869", "record_id": "flaws_cloudtrail:0000420:42dfff2c-91e0-439f-9063-c256be3f3869", "row_index": 420, "timestamp": "2018-12-25T20:52:54Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "42dfff2c-91e0-439f-9063-c256be3f3869", "eventTime": "2018-12-25T20:52:54Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0e956e79-9309-4652-8350-73a634362", "record_id": "flaws_cloudtrail:0000421:0e956e79-9309-4652-8350-73a634362", "row_index": 421, "timestamp": "2018-12-25T20:52:55Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 693, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0e956e79-9309-4652-8350-73a634362", "eventTime": "2018-12-25T20:52:55Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16842e-8d25-4ca6-a918-f739ca82cdba", "record_id": "flaws_cloudtrail:0000422:16842e-8d25-4ca6-a918-f739ca82cdba", "row_index": 422, "timestamp": "2018-12-25T20:52:56Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16842e-8d25-4ca6-a918-f739ca82cdba", "eventTime": "2018-12-25T20:52:56Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f3b57f74-a022-454d-a0eb-1da1f3997834", "record_id": "flaws_cloudtrail:0000423:f3b57f74-a022-454d-a0eb-1da1f3997834", "row_index": 423, "timestamp": "2018-12-25T20:52:58Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f3b57f74-a022-454d-a0eb-1da1f3997834", "eventTime": "2018-12-25T20:52:58Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "33d85b02-774e-401d-b225-fa8c948d83e0", "record_id": "flaws_cloudtrail:0000424:33d85b02-774e-401d-b225-fa8c948d83e0", "row_index": 424, "timestamp": "2018-12-25T20:53:00Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "33d85b02-774e-401d-b225-fa8c948d83e0", "eventTime": "2018-12-25T20:53:00Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f77962c-e90a-421c-abcf-92742b00d1bb", "record_id": "flaws_cloudtrail:0000425:f77962c-e90a-421c-abcf-92742b00d1bb", "row_index": 425, "timestamp": "2018-12-25T20:53:00Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f77962c-e90a-421c-abcf-92742b00d1bb", "eventTime": "2018-12-25T20:53:00Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "68f929272-0645-4457-a57f-0ce8335948c9", "record_id": "flaws_cloudtrail:0000426:68f929272-0645-4457-a57f-0ce8335948c9", "row_index": 426, "timestamp": "2018-12-25T20:53:01Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 697, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "68f929272-0645-4457-a57f-0ce8335948c9", "eventTime": "2018-12-25T20:53:01Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a50ccb56-cbfb-454d-b989-a0a9592c9732", "record_id": "flaws_cloudtrail:0000427:a50ccb56-cbfb-454d-b989-a0a9592c9732", "row_index": 427, "timestamp": "2018-12-25T20:53:02Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a50ccb56-cbfb-454d-b989-a0a9592c9732", "eventTime": "2018-12-25T20:53:02Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88e1a5fa-1be9-4889-9efc-793ee326399e", "record_id": "flaws_cloudtrail:0000428:88e1a5fa-1be9-4889-9efc-793ee326399e", "row_index": 428, "timestamp": "2018-12-25T20:53:04Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88e1a5fa-1be9-4889-9efc-793ee326399e", "eventTime": "2018-12-25T20:53:04Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5561f356-aa73-4aec-abe7-da691dc3113b", "record_id": "flaws_cloudtrail:0000429:5561f356-aa73-4aec-abe7-da691dc3113b", "row_index": 429, "timestamp": "2018-12-25T20:53:05Z", "event_type": "DescribeClusters", "event_source": "redshift.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 696, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5561f356-aa73-4aec-abe7-da691dc3113b", "eventTime": "2018-12-25T20:53:05Z", "eventName": "DescribeClusters", "eventSource": "redshift.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"clusters": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a4b7936d-5c8f-4f70-b833-4133d257569ca", "record_id": "flaws_cloudtrail:0000430:a4b7936d-5c8f-4f70-b833-4133d257569ca", "row_index": 430, "timestamp": "2018-12-25T20:53:06Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a4b7936d-5c8f-4f70-b833-4133d257569ca", "eventTime": "2018-12-25T20:53:06Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "14e87c05-0725-4faa-b96a-8dd9cdc889ed", "record_id": "flaws_cloudtrail:0000431:14e87c05-0725-4faa-b96a-8dd9cdc889ed", "row_index": 431, "timestamp": "2018-12-25T20:53:07Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "14e87c05-0725-4faa-b96a-8dd9cdc889ed", "eventTime": "2018-12-25T20:53:07Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98b2e428-d171-4687-9599-7a1d32548", "record_id": "flaws_cloudtrail:0000432:98b2e428-d171-4687-9599-7a1d32548", "row_index": 432, "timestamp": "2018-12-25T20:53:08Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 709, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98b2e428-d171-4687-9599-7a1d32548", "eventTime": "2018-12-25T20:53:08Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8392bd3-115f-402e-98a4-982a3c1ce679", "record_id": "flaws_cloudtrail:0000433:b8392bd3-115f-402e-98a4-982a3c1ce679", "row_index": 433, "timestamp": "2018-12-25T20:53:08Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8392bd3-115f-402e-98a4-982a3c1ce679", "eventTime": "2018-12-25T20:53:08Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "456b3a5a-62ea-4823-b960-5cb2e34cda79", "record_id": "flaws_cloudtrail:0000434:456b3a5a-62ea-4823-b960-5cb2e34cda79", "row_index": 434, "timestamp": "2018-12-25T20:53:09Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "456b3a5a-62ea-4823-b960-5cb2e34cda79", "eventTime": "2018-12-25T20:53:09Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "519f622c-f767-4378-854e-3ad6d90485cd", "record_id": "flaws_cloudtrail:0000435:519f622c-f767-4378-854e-3ad6d90485cd", "row_index": 435, "timestamp": "2018-12-25T20:53:11Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "519f622c-f767-4378-854e-3ad6d90485cd", "eventTime": "2018-12-25T20:53:11Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b27e0f42-a55e-469c-b57f-35cde8b805e7", "record_id": "flaws_cloudtrail:0000436:b27e0f42-a55e-469c-b57f-35cde8b805e7", "row_index": 436, "timestamp": "2018-12-25T20:53:13Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b27e0f42-a55e-469c-b57f-35cde8b805e7", "eventTime": "2018-12-25T20:53:13Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d1ebf7b0-1462-4367-9245-2ffe3635e52f", "record_id": "flaws_cloudtrail:0000437:d1ebf7b0-1462-4367-9245-2ffe3635e52f", "row_index": 437, "timestamp": "2018-12-25T20:53:14Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d1ebf7b0-1462-4367-9245-2ffe3635e52f", "eventTime": "2018-12-25T20:53:14Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c035e864-8a31-4389-bea6-1f8ed86b5fad", "record_id": "flaws_cloudtrail:0000438:c035e864-8a31-4389-bea6-1f8ed86b5fad", "row_index": 438, "timestamp": "2018-12-25T20:53:15Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c035e864-8a31-4389-bea6-1f8ed86b5fad", "eventTime": "2018-12-25T20:53:15Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "38fa1df5-f479-4a17-87c3-d3401ea0ca26", "record_id": "flaws_cloudtrail:0000439:38fa1df5-f479-4a17-87c3-d3401ea0ca26", "row_index": 439, "timestamp": "2018-12-25T20:53:17Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "38fa1df5-f479-4a17-87c3-d3401ea0ca26", "eventTime": "2018-12-25T20:53:17Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6467c14-0b0c-4238-b733-262512bb0dfd9", "record_id": "flaws_cloudtrail:0000440:c6467c14-0b0c-4238-b733-262512bb0dfd9", "row_index": 440, "timestamp": "2018-12-25T20:53:19Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6467c14-0b0c-4238-b733-262512bb0dfd9", "eventTime": "2018-12-25T20:53:19Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d7a594269-4088-4fe9-94b0-662db7a81b33", "record_id": "flaws_cloudtrail:0000441:d7a594269-4088-4fe9-94b0-662db7a81b33", "row_index": 441, "timestamp": "2018-12-25T20:53:20Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 715, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d7a594269-4088-4fe9-94b0-662db7a81b33", "eventTime": "2018-12-25T20:53:20Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3b7a17fc-35cf-4305-88e9-e7d7b6b98a1b", "record_id": "flaws_cloudtrail:0000442:3b7a17fc-35cf-4305-88e9-e7d7b6b98a1b", "row_index": 442, "timestamp": "2018-12-25T20:53:21Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 713, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3b7a17fc-35cf-4305-88e9-e7d7b6b98a1b", "eventTime": "2018-12-25T20:53:21Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "24302-b07e-4fdc-b296-c4f05985f7", "record_id": "flaws_cloudtrail:0000443:24302-b07e-4fdc-b296-c4f05985f7", "row_index": 443, "timestamp": "2018-12-25T20:53:22Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "24302-b07e-4fdc-b296-c4f05985f7", "eventTime": "2018-12-25T20:53:22Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b8f4ec8-cff8-4af0-818e-6479432d5d8d", "record_id": "flaws_cloudtrail:0000444:1b8f4ec8-cff8-4af0-818e-6479432d5d8d", "row_index": 444, "timestamp": "2018-12-25T20:53:23Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 712, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b8f4ec8-cff8-4af0-818e-6479432d5d8d", "eventTime": "2018-12-25T20:53:23Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2f716d75-55fb-4e66-aa23-70f0cf0d74a6", "record_id": "flaws_cloudtrail:0000445:2f716d75-55fb-4e66-aa23-70f0cf0d74a6", "row_index": 445, "timestamp": "2018-12-25T20:53:24Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 707, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2f716d75-55fb-4e66-aa23-70f0cf0d74a6", "eventTime": "2018-12-25T20:53:24Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaccd18d-cb51-4d07-ba35-841b06531ea", "record_id": "flaws_cloudtrail:0000446:aaccd18d-cb51-4d07-ba35-841b06531ea", "row_index": 446, "timestamp": "2018-12-25T20:53:26Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 711, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaccd18d-cb51-4d07-ba35-841b06531ea", "eventTime": "2018-12-25T20:53:26Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8d9e2c2-98db-49ae-89a3-41dd7e15873", "record_id": "flaws_cloudtrail:0000447:b8d9e2c2-98db-49ae-89a3-41dd7e15873", "row_index": 447, "timestamp": "2018-12-25T20:53:27Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8d9e2c2-98db-49ae-89a3-41dd7e15873", "eventTime": "2018-12-25T20:53:27Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "af59f0ab-d5c6-4965-a3e7-fcdb245076", "record_id": "flaws_cloudtrail:0000448:af59f0ab-d5c6-4965-a3e7-fcdb245076", "row_index": 448, "timestamp": "2018-12-25T20:53:28Z", "event_type": "GetStages", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "af59f0ab-d5c6-4965-a3e7-fcdb245076", "eventTime": "2018-12-25T20:53:28Z", "eventName": "GetStages", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"restApiId": "s33ppypa75", "template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a5aef44-fa4a-4bad-b9bd-f9b66acd7a59", "record_id": "flaws_cloudtrail:0000449:2a5aef44-fa4a-4bad-b9bd-f9b66acd7a59", "row_index": 449, "timestamp": "2018-12-25T20:53:29Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a5aef44-fa4a-4bad-b9bd-f9b66acd7a59", "eventTime": "2018-12-25T20:53:29Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e5717c54-84c2-424b-930b-38070a4df8fc", "record_id": "flaws_cloudtrail:0000450:e5717c54-84c2-424b-930b-38070a4df8fc", "row_index": 450, "timestamp": "2018-12-25T20:53:31Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 732, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e5717c54-84c2-424b-930b-38070a4df8fc", "eventTime": "2018-12-25T20:53:31Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d4c517be-1420-4ffc-92b3-de1c35bff55b", "record_id": "flaws_cloudtrail:0000451:d4c517be-1420-4ffc-92b3-de1c35bff55b", "row_index": 451, "timestamp": "2018-12-25T20:53:31Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d4c517be-1420-4ffc-92b3-de1c35bff55b", "eventTime": "2018-12-25T20:53:31Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "56474e38-f221-42e2-ad1e-ae4611c0d187", "record_id": "flaws_cloudtrail:0000452:56474e38-f221-42e2-ad1e-ae4611c0d187", "row_index": 452, "timestamp": "2018-12-25T20:53:32Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "56474e38-f221-42e2-ad1e-ae4611c0d187", "eventTime": "2018-12-25T20:53:32Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "adf9f0bf-9472-4f4d-9d3f-b2b834a732dd", "record_id": "flaws_cloudtrail:0000453:adf9f0bf-9472-4f4d-9d3f-b2b834a732dd", "row_index": 453, "timestamp": "2018-12-25T20:53:33Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "adf9f0bf-9472-4f4d-9d3f-b2b834a732dd", "eventTime": "2018-12-25T20:53:33Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86e6aaf1-ea64-443c-acbd-ac58e6796d8f", "record_id": "flaws_cloudtrail:0000454:86e6aaf1-ea64-443c-acbd-ac58e6796d8f", "row_index": 454, "timestamp": "2018-12-25T20:53:34Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86e6aaf1-ea64-443c-acbd-ac58e6796d8f", "eventTime": "2018-12-25T20:53:34Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0ea6876-9862-41ed-bdca-b33b3ea41ff9", "record_id": "flaws_cloudtrail:0000455:b0ea6876-9862-41ed-bdca-b33b3ea41ff9", "row_index": 455, "timestamp": "2018-12-25T20:53:34Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0ea6876-9862-41ed-bdca-b33b3ea41ff9", "eventTime": "2018-12-25T20:53:34Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "44a4dff7-6eb7-40f1-a66d-5a4634a630a5", "record_id": "flaws_cloudtrail:0000456:44a4dff7-6eb7-40f1-a66d-5a4634a630a5", "row_index": 456, "timestamp": "2018-12-25T20:53:35Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "44a4dff7-6eb7-40f1-a66d-5a4634a630a5", "eventTime": "2018-12-25T20:53:35Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0e392024-4316-4f66-880b-6f6b9de8e9fd", "record_id": "flaws_cloudtrail:0000457:d0e392024-4316-4f66-880b-6f6b9de8e9fd", "row_index": 457, "timestamp": "2018-12-25T20:53:36Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0e392024-4316-4f66-880b-6f6b9de8e9fd", "eventTime": "2018-12-25T20:53:36Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c04004-e8a9-4a94-b112-320c1c4d5e54", "record_id": "flaws_cloudtrail:0000458:c04004-e8a9-4a94-b112-320c1c4d5e54", "row_index": 458, "timestamp": "2018-12-25T20:53:36Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c04004-e8a9-4a94-b112-320c1c4d5e54", "eventTime": "2018-12-25T20:53:36Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aaefaf17-d2ac-4164-b413-d65b54551fe1", "record_id": "flaws_cloudtrail:0000459:aaefaf17-d2ac-4164-b413-d65b54551fe1", "row_index": 459, "timestamp": "2018-12-25T20:53:38Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aaefaf17-d2ac-4164-b413-d65b54551fe1", "eventTime": "2018-12-25T20:53:38Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "23fd395d-033d-4821-a399-70aed8dc2819", "record_id": "flaws_cloudtrail:0000460:23fd395d-033d-4821-a399-70aed8dc2819", "row_index": 460, "timestamp": "2018-12-25T20:53:40Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "23fd395d-033d-4821-a399-70aed8dc2819", "eventTime": "2018-12-25T20:53:40Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dadec1a9-95ba-436f-8695-b40d5f65eb49", "record_id": "flaws_cloudtrail:0000461:dadec1a9-95ba-436f-8695-b40d5f65eb49", "row_index": 461, "timestamp": "2018-12-25T20:53:42Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dadec1a9-95ba-436f-8695-b40d5f65eb49", "eventTime": "2018-12-25T20:53:42Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9671ea00-81b3-4336-baf6-9b0d821b1074", "record_id": "flaws_cloudtrail:0000462:9671ea00-81b3-4336-baf6-9b0d821b1074", "row_index": 462, "timestamp": "2018-12-25T20:53:43Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9671ea00-81b3-4336-baf6-9b0d821b1074", "eventTime": "2018-12-25T20:53:43Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "94f4e05f-cb62-461a-a7ea-8d941aede895", "record_id": "flaws_cloudtrail:0000463:94f4e05f-cb62-461a-a7ea-8d941aede895", "row_index": 463, "timestamp": "2018-12-25T20:53:45Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "94f4e05f-cb62-461a-a7ea-8d941aede895", "eventTime": "2018-12-25T20:53:45Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "48c7d23a-07ea-4cbb-a0e0-b60d4346fb82", "record_id": "flaws_cloudtrail:0000464:48c7d23a-07ea-4cbb-a0e0-b60d4346fb82", "row_index": 464, "timestamp": "2018-12-25T20:53:46Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "48c7d23a-07ea-4cbb-a0e0-b60d4346fb82", "eventTime": "2018-12-25T20:53:46Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "673b8455-4e80-46a7-b38f-c761018c418f", "record_id": "flaws_cloudtrail:0000465:673b8455-4e80-46a7-b38f-c761018c418f", "row_index": 465, "timestamp": "2018-12-25T20:53:48Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "673b8455-4e80-46a7-b38f-c761018c418f", "eventTime": "2018-12-25T20:53:48Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1350d1a3-8c6e-4a85-aa52-9f780ecec620", "record_id": "flaws_cloudtrail:0000466:1350d1a3-8c6e-4a85-aa52-9f780ecec620", "row_index": 466, "timestamp": "2018-12-25T20:53:49Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1350d1a3-8c6e-4a85-aa52-9f780ecec620", "eventTime": "2018-12-25T20:53:49Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b8a91cde-1de3-4f15-b3ca-1a6bf0c1847f", "record_id": "flaws_cloudtrail:0000467:b8a91cde-1de3-4f15-b3ca-1a6bf0c1847f", "row_index": 467, "timestamp": "2018-12-25T20:53:50Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b8a91cde-1de3-4f15-b3ca-1a6bf0c1847f", "eventTime": "2018-12-25T20:53:50Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91d565dc-0ad9-4ac2-8138-dd3803d6b0a5", "record_id": "flaws_cloudtrail:0000468:91d565dc-0ad9-4ac2-8138-dd3803d6b0a5", "row_index": 468, "timestamp": "2018-12-25T20:53:52Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91d565dc-0ad9-4ac2-8138-dd3803d6b0a5", "eventTime": "2018-12-25T20:53:52Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c785899fb-5c59-4850-8f9d-5e090b772df9", "record_id": "flaws_cloudtrail:0000469:c785899fb-5c59-4850-8f9d-5e090b772df9", "row_index": 469, "timestamp": "2018-12-25T20:53:54Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c785899fb-5c59-4850-8f9d-5e090b772df9", "eventTime": "2018-12-25T20:53:54Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de0f10d9-bca8-491e-af25-c991b2a8aedc", "record_id": "flaws_cloudtrail:0000470:de0f10d9-bca8-491e-af25-c991b2a8aedc", "row_index": 470, "timestamp": "2018-12-25T20:53:56Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 736, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de0f10d9-bca8-491e-af25-c991b2a8aedc", "eventTime": "2018-12-25T20:53:56Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6bf07371-7486-474d-95ab-2906bcad35f7", "record_id": "flaws_cloudtrail:0000471:6bf07371-7486-474d-95ab-2906bcad35f7", "row_index": 471, "timestamp": "2018-12-25T20:53:57Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 734, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6bf07371-7486-474d-95ab-2906bcad35f7", "eventTime": "2018-12-25T20:53:57Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cea813482-ed0f-4b91-8dd1-f44ff2f60c8c", "record_id": "flaws_cloudtrail:0000472:cea813482-ed0f-4b91-8dd1-f44ff2f60c8c", "row_index": 472, "timestamp": "2018-12-25T20:53:57Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cea813482-ed0f-4b91-8dd1-f44ff2f60c8c", "eventTime": "2018-12-25T20:53:57Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d1322a4-5e2c-4b0f-926d-7e2349db4bf0", "record_id": "flaws_cloudtrail:0000473:1d1322a4-5e2c-4b0f-926d-7e2349db4bf0", "row_index": 473, "timestamp": "2018-12-25T20:53:58Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d1322a4-5e2c-4b0f-926d-7e2349db4bf0", "eventTime": "2018-12-25T20:53:58Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a9867db0-ae5d-4fd9-ab12-65b07172c", "record_id": "flaws_cloudtrail:0000474:a9867db0-ae5d-4fd9-ab12-65b07172c", "row_index": 474, "timestamp": "2018-12-25T20:53:59Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a9867db0-ae5d-4fd9-ab12-65b07172c", "eventTime": "2018-12-25T20:53:59Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "be25979-e396-4d58-bae1-43d136511b389", "record_id": "flaws_cloudtrail:0000475:be25979-e396-4d58-bae1-43d136511b389", "row_index": 475, "timestamp": "2018-12-25T20:54:00Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "be25979-e396-4d58-bae1-43d136511b389", "eventTime": "2018-12-25T20:54:00Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cfe5439f-3a40-44b1-b8ee-90a8025a9cbf", "record_id": "flaws_cloudtrail:0000476:cfe5439f-3a40-44b1-b8ee-90a8025a9cbf", "row_index": 476, "timestamp": "2018-12-25T20:54:01Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cfe5439f-3a40-44b1-b8ee-90a8025a9cbf", "eventTime": "2018-12-25T20:54:01Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "704577eb-a1b8-4319-84cf-1aebb937382f", "record_id": "flaws_cloudtrail:0000477:704577eb-a1b8-4319-84cf-1aebb937382f", "row_index": 477, "timestamp": "2018-12-25T20:54:03Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "704577eb-a1b8-4319-84cf-1aebb937382f", "eventTime": "2018-12-25T20:54:03Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includePublic": false, "includeShared": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3c1589be-452f-4937-bb23-07e8957ab81a", "record_id": "flaws_cloudtrail:0000478:3c1589be-452f-4937-bb23-07e8957ab81a", "row_index": 478, "timestamp": "2018-12-25T20:54:04Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3c1589be-452f-4937-bb23-07e8957ab81a", "eventTime": "2018-12-25T20:54:04Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2e3817dd-6da7-46d9-bb2d-f51b2cb8c93c", "record_id": "flaws_cloudtrail:0000479:2e3817dd-6da7-46d9-bb2d-f51b2cb8c93c", "row_index": 479, "timestamp": "2018-12-25T20:54:06Z", "event_type": "DescribeDBSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2e3817dd-6da7-46d9-bb2d-f51b2cb8c93c", "eventTime": "2018-12-25T20:54:06Z", "eventName": "DescribeDBSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cc959dab-0d1b-4fbc-b704-628063fd541670", "record_id": "flaws_cloudtrail:0000480:cc959dab-0d1b-4fbc-b704-628063fd541670", "row_index": 480, "timestamp": "2018-12-25T20:54:07Z", "event_type": "DescribeDBClusterSnapshots", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 733, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cc959dab-0d1b-4fbc-b704-628063fd541670", "eventTime": "2018-12-25T20:54:07Z", "eventName": "DescribeDBClusterSnapshots", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"includeShared": false, "includePublic": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "88cef509-10b0-45d4-a57b-3de3199fa6f1", "record_id": "flaws_cloudtrail:0000481:88cef509-10b0-45d4-a57b-3de3199fa6f1", "row_index": 481, "timestamp": "2018-12-25T20:54:08Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "88cef509-10b0-45d4-a57b-3de3199fa6f1", "eventTime": "2018-12-25T20:54:08Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c65872f7-9bb6-40ac-965f-b8e041c12b86", "record_id": "flaws_cloudtrail:0000482:c65872f7-9bb6-40ac-965f-b8e041c12b86", "row_index": 482, "timestamp": "2018-12-25T20:54:09Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c65872f7-9bb6-40ac-965f-b8e041c12b86", "eventTime": "2018-12-25T20:54:09Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "433075b7-3859-4d19-9514-6a372aee1219", "record_id": "flaws_cloudtrail:0000483:433075b7-3859-4d19-9514-6a372aee1219", "row_index": 483, "timestamp": "2018-12-25T20:54:10Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "433075b7-3859-4d19-9514-6a372aee1219", "eventTime": "2018-12-25T20:54:10Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "576f4b26-9fae-4dc0-925f-31f84f678a85", "record_id": "flaws_cloudtrail:0000484:576f4b26-9fae-4dc0-925f-31f84f678a85", "row_index": 484, "timestamp": "2018-12-25T20:54:10Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "576f4b26-9fae-4dc0-925f-31f84f678a85", "eventTime": "2018-12-25T20:54:10Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "62ec0378-83af-4829-b19f-5149aefa5f5f", "record_id": "flaws_cloudtrail:0000485:62ec0378-83af-4829-b19f-5149aefa5f5f", "row_index": 485, "timestamp": "2018-12-25T20:54:11Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "62ec0378-83af-4829-b19f-5149aefa5f5f", "eventTime": "2018-12-25T20:54:11Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0de3d271-3e46-4e05-850b-e94dca6be928", "record_id": "flaws_cloudtrail:0000486:0de3d271-3e46-4e05-850b-e94dca6be928", "row_index": 486, "timestamp": "2018-12-25T20:54:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0de3d271-3e46-4e05-850b-e94dca6be928", "eventTime": "2018-12-25T20:54:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "54f311720-dd98-4280-a836-1f0f27596a45", "record_id": "flaws_cloudtrail:0000487:54f311720-dd98-4280-a836-1f0f27596a45", "row_index": 487, "timestamp": "2018-12-25T20:54:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "54f311720-dd98-4280-a836-1f0f27596a45", "eventTime": "2018-12-25T20:54:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "22d4a0df-203d-4f1c-b9b8-286ad24549", "record_id": "flaws_cloudtrail:0000488:22d4a0df-203d-4f1c-b9b8-286ad24549", "row_index": 488, "timestamp": "2018-12-25T20:54:16Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "22d4a0df-203d-4f1c-b9b8-286ad24549", "eventTime": "2018-12-25T20:54:16Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5b6fc48d-dc0d-4701-98d1-511150cebf61", "record_id": "flaws_cloudtrail:0000489:5b6fc48d-dc0d-4701-98d1-511150cebf61", "row_index": 489, "timestamp": "2018-12-25T20:54:18Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5b6fc48d-dc0d-4701-98d1-511150cebf61", "eventTime": "2018-12-25T20:54:18Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d26e9085-d78a-4548-bc78-287758a340a", "record_id": "flaws_cloudtrail:0000490:d26e9085-d78a-4548-bc78-287758a340a", "row_index": 490, "timestamp": "2018-12-25T20:54:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d26e9085-d78a-4548-bc78-287758a340a", "eventTime": "2018-12-25T20:54:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a764c2a9-1a7d-4862-ba6e-fa4be81402bf", "record_id": "flaws_cloudtrail:0000491:a764c2a9-1a7d-4862-ba6e-fa4be81402bf", "row_index": 491, "timestamp": "2018-12-25T20:54:22Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a764c2a9-1a7d-4862-ba6e-fa4be81402bf", "eventTime": "2018-12-25T20:54:22Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e1479e94-494a-4814-9e2a-5dc4a4590d30", "record_id": "flaws_cloudtrail:0000492:e1479e94-494a-4814-9e2a-5dc4a4590d30", "row_index": 492, "timestamp": "2018-12-25T20:54:22Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e1479e94-494a-4814-9e2a-5dc4a4590d30", "eventTime": "2018-12-25T20:54:22Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bbe965fb-9a11-4db1-a591-5347eb73123", "record_id": "flaws_cloudtrail:0000493:bbe965fb-9a11-4db1-a591-5347eb73123", "row_index": 493, "timestamp": "2018-12-25T20:54:23Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bbe965fb-9a11-4db1-a591-5347eb73123", "eventTime": "2018-12-25T20:54:23Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75fe10f6-5cd0-4acb-b638-e2e30e81a94a", "record_id": "flaws_cloudtrail:0000494:75fe10f6-5cd0-4acb-b638-e2e30e81a94a", "row_index": 494, "timestamp": "2018-12-25T20:54:24Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75fe10f6-5cd0-4acb-b638-e2e30e81a94a", "eventTime": "2018-12-25T20:54:24Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "882ce417-d44a-48b1-a721-0f1919e653b5", "record_id": "flaws_cloudtrail:0000495:882ce417-d44a-48b1-a721-0f1919e653b5", "row_index": 495, "timestamp": "2018-12-25T20:54:26Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "882ce417-d44a-48b1-a721-0f1919e653b5", "eventTime": "2018-12-25T20:54:26Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e53badd-7ee6-4115-8082-828e565507ec5", "record_id": "flaws_cloudtrail:0000496:6e53badd-7ee6-4115-8082-828e565507ec5", "row_index": 496, "timestamp": "2018-12-25T20:54:27Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e53badd-7ee6-4115-8082-828e565507ec5", "eventTime": "2018-12-25T20:54:27Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "81839b8b-8aea-4408-bf28-f5d01848a22", "record_id": "flaws_cloudtrail:0000497:81839b8b-8aea-4408-bf28-f5d01848a22", "row_index": 497, "timestamp": "2018-12-25T20:54:28Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 655, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "81839b8b-8aea-4408-bf28-f5d01848a22", "eventTime": "2018-12-25T20:54:28Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e33eeb7c-250e-41a8-a0cd-1c0991da2dd6", "record_id": "flaws_cloudtrail:0000498:e33eeb7c-250e-41a8-a0cd-1c0991da2dd6", "row_index": 498, "timestamp": "2018-12-25T20:54:29Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e33eeb7c-250e-41a8-a0cd-1c0991da2dd6", "eventTime": "2018-12-25T20:54:29Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2b0e2e43-f672-4309-811e-0fa1409ac7f3", "record_id": "flaws_cloudtrail:0000499:2b0e2e43-f672-4309-811e-0fa1409ac7f3", "row_index": 499, "timestamp": "2018-12-25T20:54:30Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2b0e2e43-f672-4309-811e-0fa1409ac7f3", "eventTime": "2018-12-25T20:54:30Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "06ebd783-f119-4af4-8e5f-476635128e9f", "record_id": "flaws_cloudtrail:0000500:06ebd783-f119-4af4-8e5f-476635128e9f", "row_index": 500, "timestamp": "2018-12-25T20:54:31Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "06ebd783-f119-4af4-8e5f-476635128e9f", "eventTime": "2018-12-25T20:54:31Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "91e18bb0-d0cb-48fe-82b5-d0eb9f97a3a8", "record_id": "flaws_cloudtrail:0000501:91e18bb0-d0cb-48fe-82b5-d0eb9f97a3a8", "row_index": 501, "timestamp": "2018-12-25T20:54:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "91e18bb0-d0cb-48fe-82b5-d0eb9f97a3a8", "eventTime": "2018-12-25T20:54:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b70119-3a3a-469b-b0b8-f34c7a25c13f", "record_id": "flaws_cloudtrail:0000502:b70119-3a3a-469b-b0b8-f34c7a25c13f", "row_index": 502, "timestamp": "2018-12-25T20:54:32Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b70119-3a3a-469b-b0b8-f34c7a25c13f", "eventTime": "2018-12-25T20:54:32Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1b4037aa-48c3-417f-9bc1-a44f447a353f", "record_id": "flaws_cloudtrail:0000503:1b4037aa-48c3-417f-9bc1-a44f447a353f", "row_index": 503, "timestamp": "2018-12-25T20:54:34Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1b4037aa-48c3-417f-9bc1-a44f447a353f", "eventTime": "2018-12-25T20:54:34Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c65cb426-e011-4a85-af67-d9fd08f991e2", "record_id": "flaws_cloudtrail:0000504:c65cb426-e011-4a85-af67-d9fd08f991e2", "row_index": 504, "timestamp": "2018-12-25T20:54:35Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c65cb426-e011-4a85-af67-d9fd08f991e2", "eventTime": "2018-12-25T20:54:35Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "140c4312-14a6-4b7c-9e56-4eed78c379fd", "record_id": "flaws_cloudtrail:0000505:140c4312-14a6-4b7c-9e56-4eed78c379fd", "row_index": 505, "timestamp": "2018-12-25T20:54:37Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "140c4312-14a6-4b7c-9e56-4eed78c379fd", "eventTime": "2018-12-25T20:54:37Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c09d931f-0f96-405a-83a1-0eb726494", "record_id": "flaws_cloudtrail:0000506:c09d931f-0f96-405a-83a1-0eb726494", "row_index": 506, "timestamp": "2018-12-25T20:54:38Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c09d931f-0f96-405a-83a1-0eb726494", "eventTime": "2018-12-25T20:54:38Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3bbd0bdc-cc0d-48fb-9cc6-44c93c84120e", "record_id": "flaws_cloudtrail:0000507:3bbd0bdc-cc0d-48fb-9cc6-44c93c84120e", "row_index": 507, "timestamp": "2018-12-25T20:54:40Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3bbd0bdc-cc0d-48fb-9cc6-44c93c84120e", "eventTime": "2018-12-25T20:54:40Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "ef6b5cc4-4a99-4507-8b08-9fe3dc52413", "record_id": "flaws_cloudtrail:0000508:ef6b5cc4-4a99-4507-8b08-9fe3dc52413", "row_index": 508, "timestamp": "2018-12-25T20:54:42Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "ef6b5cc4-4a99-4507-8b08-9fe3dc52413", "eventTime": "2018-12-25T20:54:42Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b0df19a6-4da2-431c-9b90-848266ff84c7f", "record_id": "flaws_cloudtrail:0000509:b0df19a6-4da2-431c-9b90-848266ff84c7f", "row_index": 509, "timestamp": "2018-12-25T20:54:43Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 728, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b0df19a6-4da2-431c-9b90-848266ff84c7f", "eventTime": "2018-12-25T20:54:43Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7f49e74d-13be-442c-8ad4-1f282d8ccec4", "record_id": "flaws_cloudtrail:0000510:7f49e74d-13be-442c-8ad4-1f282d8ccec4", "row_index": 510, "timestamp": "2018-12-25T20:54:44Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7f49e74d-13be-442c-8ad4-1f282d8ccec4", "eventTime": "2018-12-25T20:54:44Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "97b5f4f6-84e5-483e-a5fd-cdc72bd7b391", "record_id": "flaws_cloudtrail:0000511:97b5f4f6-84e5-483e-a5fd-cdc72bd7b391", "row_index": 511, "timestamp": "2018-12-25T20:54:45Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "97b5f4f6-84e5-483e-a5fd-cdc72bd7b391", "eventTime": "2018-12-25T20:54:45Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1d063aa2-cf88-479a-ad15-eb228de2933a", "record_id": "flaws_cloudtrail:0000512:1d063aa2-cf88-479a-ad15-eb228de2933a", "row_index": 512, "timestamp": "2018-12-25T20:54:46Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1d063aa2-cf88-479a-ad15-eb228de2933a", "eventTime": "2018-12-25T20:54:46Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d2bbe645-e3b4-4442-a164-9aca61dc99de", "record_id": "flaws_cloudtrail:0000513:d2bbe645-e3b4-4442-a164-9aca61dc99de", "row_index": 513, "timestamp": "2018-12-25T20:54:48Z", "event_type": "DescribeTrails", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d2bbe645-e3b4-4442-a164-9aca61dc99de", "eventTime": "2018-12-25T20:54:48Z", "eventName": "DescribeTrails", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c6ec99a3-04c2-4bdc-b2f7-399cdd907eb5", "record_id": "flaws_cloudtrail:0000514:c6ec99a3-04c2-4bdc-b2f7-399cdd907eb5", "row_index": 514, "timestamp": "2018-12-25T20:54:49Z", "event_type": "GetEventSelectors", "event_source": "cloudtrail.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 749, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c6ec99a3-04c2-4bdc-b2f7-399cdd907eb5", "eventTime": "2018-12-25T20:54:49Z", "eventName": "GetEventSelectors", "eventSource": "cloudtrail.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"trailName": "cloudtrail"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d165b825-d6ed-42ce-a8c2-66371d8cade", "record_id": "flaws_cloudtrail:0000515:d165b825-d6ed-42ce-a8c2-66371d8cade", "row_index": 515, "timestamp": "2018-12-25T20:55:31Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d165b825-d6ed-42ce-a8c2-66371d8cade", "eventTime": "2018-12-25T20:55:31Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36ffe358-6283-4e7e-a127-03cfee9f6a6f", "record_id": "flaws_cloudtrail:0000516:36ffe358-6283-4e7e-a127-03cfee9f6a6f", "row_index": 516, "timestamp": "2018-12-25T20:55:32Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36ffe358-6283-4e7e-a127-03cfee9f6a6f", "eventTime": "2018-12-25T20:55:32Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8176d0eb-00ee-46af-b7a7-f8018f77d6f9", "record_id": "flaws_cloudtrail:0000517:8176d0eb-00ee-46af-b7a7-f8018f77d6f9", "row_index": 517, "timestamp": "2018-12-25T20:55:33Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8176d0eb-00ee-46af-b7a7-f8018f77d6f9", "eventTime": "2018-12-25T20:55:33Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c21c62c-845a-404d-a3c1-e20d9298e98f", "record_id": "flaws_cloudtrail:0000518:5c21c62c-845a-404d-a3c1-e20d9298e98f", "row_index": 518, "timestamp": "2018-12-25T20:55:34Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c21c62c-845a-404d-a3c1-e20d9298e98f", "eventTime": "2018-12-25T20:55:34Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc7b02ab-e9aa-4131-9556-de632ce482c6", "record_id": "flaws_cloudtrail:0000519:bc7b02ab-e9aa-4131-9556-de632ce482c6", "row_index": 519, "timestamp": "2018-12-25T20:55:34Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc7b02ab-e9aa-4131-9556-de632ce482c6", "eventTime": "2018-12-25T20:55:34Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dca2dbf2-90ba-4718-8480-79869edd4e76", "record_id": "flaws_cloudtrail:0000520:dca2dbf2-90ba-4718-8480-79869edd4e76", "row_index": 520, "timestamp": "2018-12-25T20:55:35Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dca2dbf2-90ba-4718-8480-79869edd4e76", "eventTime": "2018-12-25T20:55:35Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "cea5d062-e1d8-427b-860a-1c01b4ecd0af", "record_id": "flaws_cloudtrail:0000521:cea5d062-e1d8-427b-860a-1c01b4ecd0af", "row_index": 521, "timestamp": "2018-12-25T20:55:36Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "cea5d062-e1d8-427b-860a-1c01b4ecd0af", "eventTime": "2018-12-25T20:55:36Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ceaabc-7b61-4fe9-9a63-729878f98f563", "record_id": "flaws_cloudtrail:0000522:47ceaabc-7b61-4fe9-9a63-729878f98f563", "row_index": 522, "timestamp": "2018-12-25T20:55:37Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ceaabc-7b61-4fe9-9a63-729878f98f563", "eventTime": "2018-12-25T20:55:37Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b1c96121-0e69-45c3-9413-6ee46c1bec97", "record_id": "flaws_cloudtrail:0000523:b1c96121-0e69-45c3-9413-6ee46c1bec97", "row_index": 523, "timestamp": "2018-12-25T20:55:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b1c96121-0e69-45c3-9413-6ee46c1bec97", "eventTime": "2018-12-25T20:55:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bc230579c-3cc2-4e8f-9b61-46ec16071b", "record_id": "flaws_cloudtrail:0000524:bc230579c-3cc2-4e8f-9b61-46ec16071b", "row_index": 524, "timestamp": "2018-12-25T20:55:38Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bc230579c-3cc2-4e8f-9b61-46ec16071b", "eventTime": "2018-12-25T20:55:38Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a211828b6-a8ea-4b5c-97d4-695e7aeaf08f", "record_id": "flaws_cloudtrail:0000525:a211828b6-a8ea-4b5c-97d4-695e7aeaf08f", "row_index": 525, "timestamp": "2018-12-25T20:55:40Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a211828b6-a8ea-4b5c-97d4-695e7aeaf08f", "eventTime": "2018-12-25T20:55:40Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4a85b55e-faf4-44fc-b51c-6b7dd9b45856", "record_id": "flaws_cloudtrail:0000526:4a85b55e-faf4-44fc-b51c-6b7dd9b45856", "row_index": 526, "timestamp": "2018-12-25T20:55:42Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4a85b55e-faf4-44fc-b51c-6b7dd9b45856", "eventTime": "2018-12-25T20:55:42Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9776f280-6981-4cf9-aae1-4ffb3617da3a", "record_id": "flaws_cloudtrail:0000527:9776f280-6981-4cf9-aae1-4ffb3617da3a", "row_index": 527, "timestamp": "2018-12-25T20:55:44Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9776f280-6981-4cf9-aae1-4ffb3617da3a", "eventTime": "2018-12-25T20:55:44Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "75096d3b-228b-49f3-a110-df73f90b97e7", "record_id": "flaws_cloudtrail:0000528:75096d3b-228b-49f3-a110-df73f90b97e7", "row_index": 528, "timestamp": "2018-12-25T20:55:46Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "75096d3b-228b-49f3-a110-df73f90b97e7", "eventTime": "2018-12-25T20:55:46Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b381e977-cbcb-42f8-8b5c-c16bca093b2b", "record_id": "flaws_cloudtrail:0000529:b381e977-cbcb-42f8-8b5c-c16bca093b2b", "row_index": 529, "timestamp": "2018-12-25T20:55:47Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b381e977-cbcb-42f8-8b5c-c16bca093b2b", "eventTime": "2018-12-25T20:55:47Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ff102cd-58cc-4bd2-a555-6d896e940229", "record_id": "flaws_cloudtrail:0000530:1ff102cd-58cc-4bd2-a555-6d896e940229", "row_index": 530, "timestamp": "2018-12-25T20:55:49Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ff102cd-58cc-4bd2-a555-6d896e940229", "eventTime": "2018-12-25T20:55:49Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "abd01886-4c08-48fb-bec0-c83417fdec7b", "record_id": "flaws_cloudtrail:0000531:abd01886-4c08-48fb-bec0-c83417fdec7b", "row_index": 531, "timestamp": "2018-12-25T20:55:50Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "abd01886-4c08-48fb-bec0-c83417fdec7b", "eventTime": "2018-12-25T20:55:50Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "01769e5-046d-4a9e-ad00-84832bebb86", "record_id": "flaws_cloudtrail:0000532:01769e5-046d-4a9e-ad00-84832bebb86", "row_index": 532, "timestamp": "2018-12-25T20:55:51Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "01769e5-046d-4a9e-ad00-84832bebb86", "eventTime": "2018-12-25T20:55:51Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "198146bb-1d20-4bb2-8b72-994534a4c0186", "record_id": "flaws_cloudtrail:0000533:198146bb-1d20-4bb2-8b72-994534a4c0186", "row_index": 533, "timestamp": "2018-12-25T20:55:53Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 731, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "198146bb-1d20-4bb2-8b72-994534a4c0186", "eventTime": "2018-12-25T20:55:53Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "50d818ad-646d-44c3-91c9-33829b06f4d1", "record_id": "flaws_cloudtrail:0000534:50d818ad-646d-44c3-91c9-33829b06f4d1", "row_index": 534, "timestamp": "2018-12-25T20:55:55Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "50d818ad-646d-44c3-91c9-33829b06f4d1", "eventTime": "2018-12-25T20:55:55Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "78a65ef2-25ca-4165-b2ab-6eeb9abe81e0", "record_id": "flaws_cloudtrail:0000535:78a65ef2-25ca-4165-b2ab-6eeb9abe81e0", "row_index": 535, "timestamp": "2018-12-25T20:55:57Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 729, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "78a65ef2-25ca-4165-b2ab-6eeb9abe81e0", "eventTime": "2018-12-25T20:55:57Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d40d7a0f-4cd0-4473-8e25-639750b005fcf", "record_id": "flaws_cloudtrail:0000536:d40d7a0f-4cd0-4473-8e25-639750b005fcf", "row_index": 536, "timestamp": "2018-12-25T20:55:59Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 730, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d40d7a0f-4cd0-4473-8e25-639750b005fcf", "eventTime": "2018-12-25T20:55:59Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f17b44d8-8bbe-4cac-a22b-201f718f7c6d", "record_id": "flaws_cloudtrail:0000537:f17b44d8-8bbe-4cac-a22b-201f718f7c6d", "row_index": 537, "timestamp": "2018-12-25T20:56:00Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f17b44d8-8bbe-4cac-a22b-201f718f7c6d", "eventTime": "2018-12-25T20:56:00Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "73652f1-ce49-4260-bb80-9f97a593e964", "record_id": "flaws_cloudtrail:0000538:73652f1-ce49-4260-bb80-9f97a593e964", "row_index": 538, "timestamp": "2018-12-25T20:56:00Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 726, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "73652f1-ce49-4260-bb80-9f97a593e964", "eventTime": "2018-12-25T20:56:00Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "bd36166-c8d6-49d4-a727-35a51f3785c0", "record_id": "flaws_cloudtrail:0000539:bd36166-c8d6-49d4-a727-35a51f3785c0", "row_index": 539, "timestamp": "2018-12-25T20:56:01Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "bd36166-c8d6-49d4-a727-35a51f3785c0", "eventTime": "2018-12-25T20:56:01Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d17907-db3a-49b8-97d3-68d791086f78a", "record_id": "flaws_cloudtrail:0000540:d17907-db3a-49b8-97d3-68d791086f78a", "row_index": 540, "timestamp": "2018-12-25T20:56:03Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d17907-db3a-49b8-97d3-68d791086f78a", "eventTime": "2018-12-25T20:56:03Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "b2968ab3-4bab-4937-89cb-e889ef01e21d", "record_id": "flaws_cloudtrail:0000541:b2968ab3-4bab-4937-89cb-e889ef01e21d", "row_index": 541, "timestamp": "2018-12-25T20:56:04Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "b2968ab3-4bab-4937-89cb-e889ef01e21d", "eventTime": "2018-12-25T20:56:04Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de76a60d-7f7f-49c1-864a-076e9359e4eb", "record_id": "flaws_cloudtrail:0000542:de76a60d-7f7f-49c1-864a-076e9359e4eb", "row_index": 542, "timestamp": "2018-12-25T20:56:05Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de76a60d-7f7f-49c1-864a-076e9359e4eb", "eventTime": "2018-12-25T20:56:05Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1f731383d-69c4-48ab-852a-ae8d876b35a7", "record_id": "flaws_cloudtrail:0000543:1f731383d-69c4-48ab-852a-ae8d876b35a7", "row_index": 543, "timestamp": "2018-12-25T20:56:06Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 727, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1f731383d-69c4-48ab-852a-ae8d876b35a7", "eventTime": "2018-12-25T20:56:06Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4b563cd2-899a-4ff8-a583-27f471a816ff", "record_id": "flaws_cloudtrail:0000544:4b563cd2-899a-4ff8-a583-27f471a816ff", "row_index": 544, "timestamp": "2018-12-25T20:56:08Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4b563cd2-899a-4ff8-a583-27f471a816ff", "eventTime": "2018-12-25T20:56:08Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "47ce8cf0-7415-4d26-b1df-53c325208abd", "record_id": "flaws_cloudtrail:0000545:47ce8cf0-7415-4d26-b1df-53c325208abd", "row_index": 545, "timestamp": "2018-12-25T20:56:09Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "47ce8cf0-7415-4d26-b1df-53c325208abd", "eventTime": "2018-12-25T20:56:09Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c49720-528a-44a9-9041-3212df732e84", "record_id": "flaws_cloudtrail:0000546:c49720-528a-44a9-9041-3212df732e84", "row_index": 546, "timestamp": "2018-12-25T20:56:11Z", "event_type": "DescribeVolumes", "event_source": "ec2.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c49720-528a-44a9-9041-3212df732e84", "eventTime": "2018-12-25T20:56:11Z", "eventName": "DescribeVolumes", "eventSource": "ec2.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"maxResults": 1000, "volumeSet": {}, "filterSet": {}}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "83670d-ea88-4e74-a024-cf25fd761438", "record_id": "flaws_cloudtrail:0000547:83670d-ea88-4e74-a024-cf25fd761438", "row_index": 547, "timestamp": "2018-12-25T20:56:12Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "83670d-ea88-4e74-a024-cf25fd761438", "eventTime": "2018-12-25T20:56:12Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bebfb26-d720-4352-be52-dd525c909fd0", "record_id": "flaws_cloudtrail:0000548:8bebfb26-d720-4352-be52-dd525c909fd0", "row_index": 548, "timestamp": "2018-12-25T20:56:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 681, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bebfb26-d720-4352-be52-dd525c909fd0", "eventTime": "2018-12-25T20:56:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6dc4917b-19f8-4a17-8155-f66d2b1cd21c", "record_id": "flaws_cloudtrail:0000549:6dc4917b-19f8-4a17-8155-f66d2b1cd21c", "row_index": 549, "timestamp": "2018-12-25T20:56:13Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 718, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6dc4917b-19f8-4a17-8155-f66d2b1cd21c", "eventTime": "2018-12-25T20:56:13Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c4597dc4-a591-4f00-a042-d996fb1738a8", "record_id": "flaws_cloudtrail:0000550:c4597dc4-a591-4f00-a042-d996fb1738a8", "row_index": 550, "timestamp": "2018-12-25T20:56:14Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c4597dc4-a591-4f00-a042-d996fb1738a8", "eventTime": "2018-12-25T20:56:14Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c59b8534-6b06-44a4-9a09-900bfa0e7858", "record_id": "flaws_cloudtrail:0000551:c59b8534-6b06-44a4-9a09-900bfa0e7858", "row_index": 551, "timestamp": "2018-12-25T20:56:15Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 719, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c59b8534-6b06-44a4-9a09-900bfa0e7858", "eventTime": "2018-12-25T20:56:15Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d09f2ba9-95f0-44bd-9210-6d12c514913", "record_id": "flaws_cloudtrail:0000552:d09f2ba9-95f0-44bd-9210-6d12c514913", "row_index": 552, "timestamp": "2018-12-25T20:56:16Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 723, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d09f2ba9-95f0-44bd-9210-6d12c514913", "eventTime": "2018-12-25T20:56:16Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9d638a99-de93-4cc4-9f58-d4bd3f05c23e", "record_id": "flaws_cloudtrail:0000553:9d638a99-de93-4cc4-9f58-d4bd3f05c23e", "row_index": 553, "timestamp": "2018-12-25T20:56:18Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9d638a99-de93-4cc4-9f58-d4bd3f05c23e", "eventTime": "2018-12-25T20:56:18Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "80e9a952-c4e9-4c67-a841-414806b6e", "record_id": "flaws_cloudtrail:0000554:80e9a952-c4e9-4c67-a841-414806b6e", "row_index": 554, "timestamp": "2018-12-25T20:56:20Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 716, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "80e9a952-c4e9-4c67-a841-414806b6e", "eventTime": "2018-12-25T20:56:20Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "352e8184-16f2-42d4-9a28-5b26db298880", "record_id": "flaws_cloudtrail:0000555:352e8184-16f2-42d4-9a28-5b26db298880", "row_index": 555, "timestamp": "2018-12-25T20:56:21Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 722, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "352e8184-16f2-42d4-9a28-5b26db298880", "eventTime": "2018-12-25T20:56:21Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c10dcc37-a998-4995-93b0-296daea14f4a", "record_id": "flaws_cloudtrail:0000556:c10dcc37-a998-4995-93b0-296daea14f4a", "row_index": 556, "timestamp": "2018-12-25T20:56:23Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 724, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c10dcc37-a998-4995-93b0-296daea14f4a", "eventTime": "2018-12-25T20:56:23Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e0ed2034-57ca-41b1-a1b0-73e639284bee0", "record_id": "flaws_cloudtrail:0000557:e0ed2034-57ca-41b1-a1b0-73e639284bee0", "row_index": 557, "timestamp": "2018-12-25T20:56:25Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 725, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e0ed2034-57ca-41b1-a1b0-73e639284bee0", "eventTime": "2018-12-25T20:56:25Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "63657f33-063a-4e7f-8228-316df97b00c4", "record_id": "flaws_cloudtrail:0000558:63657f33-063a-4e7f-8228-316df97b00c4", "row_index": 558, "timestamp": "2018-12-25T20:56:26Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "63657f33-063a-4e7f-8228-316df97b00c4", "eventTime": "2018-12-25T20:56:26Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98f93711-40cd-426a-aa86-7c76810eff", "record_id": "flaws_cloudtrail:0000559:98f93711-40cd-426a-aa86-7c76810eff", "row_index": 559, "timestamp": "2018-12-25T20:56:27Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98f93711-40cd-426a-aa86-7c76810eff", "eventTime": "2018-12-25T20:56:27Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0a8dd8a1-46a2-4580-9b79-e36a182161", "record_id": "flaws_cloudtrail:0000560:0a8dd8a1-46a2-4580-9b79-e36a182161", "row_index": 560, "timestamp": "2018-12-25T20:56:28Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 717, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0a8dd8a1-46a2-4580-9b79-e36a182161", "eventTime": "2018-12-25T20:56:28Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "49529b38-8fb0-4233-9003-5c1ef85b8a8f", "record_id": "flaws_cloudtrail:0000561:49529b38-8fb0-4233-9003-5c1ef85b8a8f", "row_index": 561, "timestamp": "2018-12-25T20:56:29Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 721, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "49529b38-8fb0-4233-9003-5c1ef85b8a8f", "eventTime": "2018-12-25T20:56:29Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8bc3435d-f26e-4db3-bd43-d361927c8ed5b", "record_id": "flaws_cloudtrail:0000562:8bc3435d-f26e-4db3-bd43-d361927c8ed5b", "row_index": 562, "timestamp": "2018-12-25T20:56:30Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/backup", "account_id": "811596193553", "principal_id": "AIDA9BO36HFBHKGJAO9C1", "user_name": "backup", "access_key_id": "AKIA01U43UX3RBRDXF4Q", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.15.33 Python/2.7.9 Windows/8 botocore/1.10.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 853, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8bc3435d-f26e-4db3-bd43-d361927c8ed5b", "eventTime": "2018-12-25T20:56:30Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.15.33 Python/2.7.9 Windows/8 botocore/1.10.33", "awsRegion": "us-west-2", "errorCode": "AccessDenied", "errorMessage": "User: arn:aws:iam::811596193553:user/backup is not authorized to perform: apigateway:GET on resource: arn:aws:apigateway:us-west-2::/restapis", "userIdentity": {"type": "IAMUser", "principalId": "AIDA9BO36HFBHKGJAO9C1", "arn": "arn:aws:iam::811596193553:user/backup", "accountId": "811596193553", "accessKeyId": "AKIA01U43UX3RBRDXF4Q", "userName": "backup"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "593c82ef-f0c1-47ce-9532-6482acb620479", "record_id": "flaws_cloudtrail:0000563:593c82ef-f0c1-47ce-9532-6482acb620479", "row_index": 563, "timestamp": "2018-12-25T20:56:31Z", "event_type": "ListCertificates", "event_source": "acm.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 720, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "managementEvent", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "593c82ef-f0c1-47ce-9532-6482acb620479", "eventTime": "2018-12-25T20:56:31Z", "eventName": "ListCertificates", "eventSource": "acm.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "d0e6dac3-3683-46ce-bfc4-37224b2dd", "record_id": "flaws_cloudtrail:0000564:d0e6dac3-3683-46ce-bfc4-37224b2dd", "row_index": 564, "timestamp": "2018-12-25T20:56:32Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "d0e6dac3-3683-46ce-bfc4-37224b2dd", "eventTime": "2018-12-25T20:56:32Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9ce552c8-9ee0-494a-b5bd-6f51a59cebc8", "record_id": "flaws_cloudtrail:0000565:9ce552c8-9ee0-494a-b5bd-6f51a59cebc8", "row_index": 565, "timestamp": "2018-12-25T20:56:33Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-north-1"}, "resource_arns": [], "raw_record_size_bytes": 675, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9ce552c8-9ee0-494a-b5bd-6f51a59cebc8", "eventTime": "2018-12-25T20:56:33Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-north-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "36d8aa60-9522-42f9-83b4-bd3fe2811fd7", "record_id": "flaws_cloudtrail:0000566:36d8aa60-9522-42f9-83b4-bd3fe2811fd7", "row_index": 566, "timestamp": "2018-12-25T20:56:33Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-3"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "36d8aa60-9522-42f9-83b4-bd3fe2811fd7", "eventTime": "2018-12-25T20:56:33Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-3", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "7ecd89b9-f6b5-4cc6-9a14-f740c2590ff1", "record_id": "flaws_cloudtrail:0000567:7ecd89b9-f6b5-4cc6-9a14-f740c2590ff1", "row_index": 567, "timestamp": "2018-12-25T20:56:34Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "7ecd89b9-f6b5-4cc6-9a14-f740c2590ff1", "eventTime": "2018-12-25T20:56:34Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "86b921e3-b410-4a37-9750-0af6cec6d144", "record_id": "flaws_cloudtrail:0000568:86b921e3-b410-4a37-9750-0af6cec6d144", "row_index": 568, "timestamp": "2018-12-25T20:56:35Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-west-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "86b921e3-b410-4a37-9750-0af6cec6d144", "eventTime": "2018-12-25T20:56:35Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "caa414b6-3163-4200-a5ed-ffb609dd19ee", "record_id": "flaws_cloudtrail:0000569:caa414b6-3163-4200-a5ed-ffb609dd19ee", "row_index": 569, "timestamp": "2018-12-25T20:56:36Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-2"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "caa414b6-3163-4200-a5ed-ffb609dd19ee", "eventTime": "2018-12-25T20:56:36Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9e46ae41-2c98-477e-9eb7-d580349b9c4ab", "record_id": "flaws_cloudtrail:0000570:9e46ae41-2c98-477e-9eb7-d580349b9c4ab", "row_index": 570, "timestamp": "2018-12-25T20:56:38Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-northeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9e46ae41-2c98-477e-9eb7-d580349b9c4ab", "eventTime": "2018-12-25T20:56:38Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-northeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5c2f22ef-200c-4c8f-9b8e-aa24ec8a76c5", "record_id": "flaws_cloudtrail:0000571:5c2f22ef-200c-4c8f-9b8e-aa24ec8a76c5", "row_index": 571, "timestamp": "2018-12-25T20:56:40Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "sa-east-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5c2f22ef-200c-4c8f-9b8e-aa24ec8a76c5", "eventTime": "2018-12-25T20:56:40Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "sa-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "600754c95-c9ee-429f-b1c1-d3de99f4f8db", "record_id": "flaws_cloudtrail:0000572:600754c95-c9ee-429f-b1c1-d3de99f4f8db", "row_index": 572, "timestamp": "2018-12-25T20:56:41Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ca-central-1"}, "resource_arns": [], "raw_record_size_bytes": 678, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "600754c95-c9ee-429f-b1c1-d3de99f4f8db", "eventTime": "2018-12-25T20:56:41Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ca-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "682ade23-96c5-4698-8564-753df0a09cab", "record_id": "flaws_cloudtrail:0000573:682ade23-96c5-4698-8564-753df0a09cab", "row_index": 573, "timestamp": "2018-12-25T20:56:43Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-1"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "682ade23-96c5-4698-8564-753df0a09cab", "eventTime": "2018-12-25T20:56:43Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "4cd66ddf-4462-4a40-8931-4c355762f3fd8", "record_id": "flaws_cloudtrail:0000574:4cd66ddf-4462-4a40-8931-4c355762f3fd8", "row_index": 574, "timestamp": "2018-12-25T20:56:45Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-southeast-2"}, "resource_arns": [], "raw_record_size_bytes": 680, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "4cd66ddf-4462-4a40-8931-4c355762f3fd8", "eventTime": "2018-12-25T20:56:45Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-southeast-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "de29fe11-a5fd-4a37-83f8-971f6fefb3d7", "record_id": "flaws_cloudtrail:0000575:de29fe11-a5fd-4a37-83f8-971f6fefb3d7", "row_index": 575, "timestamp": "2018-12-25T20:56:46Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "eu-central-1"}, "resource_arns": [], "raw_record_size_bytes": 677, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "de29fe11-a5fd-4a37-83f8-971f6fefb3d7", "eventTime": "2018-12-25T20:56:46Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "eu-central-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c80f32ee-1bc9-4cf8-adb6-33813f45cda", "record_id": "flaws_cloudtrail:0000576:c80f32ee-1bc9-4cf8-adb6-33813f45cda", "row_index": 576, "timestamp": "2018-12-25T20:56:47Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 672, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c80f32ee-1bc9-4cf8-adb6-33813f45cda", "eventTime": "2018-12-25T20:56:47Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "5ebb8a03-687e-437b-8881-b1d85fa5c567", "record_id": "flaws_cloudtrail:0000577:5ebb8a03-687e-437b-8881-b1d85fa5c567", "row_index": 577, "timestamp": "2018-12-25T20:56:48Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "5ebb8a03-687e-437b-8881-b1d85fa5c567", "eventTime": "2018-12-25T20:56:48Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3a70a153-62ed-4130-9c1d-b4510b165cf1", "record_id": "flaws_cloudtrail:0000578:3a70a153-62ed-4130-9c1d-b4510b165cf1", "row_index": 578, "timestamp": "2018-12-25T20:56:50Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-1"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3a70a153-62ed-4130-9c1d-b4510b165cf1", "eventTime": "2018-12-25T20:56:50Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "52f7c3f5-fc06-49ae-9bf1-0af7d154c0bd", "record_id": "flaws_cloudtrail:0000579:52f7c3f5-fc06-49ae-9bf1-0af7d154c0bd", "row_index": 579, "timestamp": "2018-12-25T20:56:51Z", "event_type": "ListTopics", "event_source": "sns.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 674, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "52f7c3f5-fc06-49ae-9bf1-0af7d154c0bd", "eventTime": "2018-12-25T20:56:51Z", "eventName": "ListTopics", "eventSource": "sns.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ad317bd-3042-4691-804a-f5ef0c4031fb", "record_id": "flaws_cloudtrail:0000580:1ad317bd-3042-4691-804a-f5ef0c4031fb", "row_index": 580, "timestamp": "2018-12-25T20:56:52Z", "event_type": "ListDistributions", "event_source": "cloudfront.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 714, "raw_record_depth": 2, "raw_record_top_level_keys": ["apiVersion", "awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ad317bd-3042-4691-804a-f5ef0c4031fb", "eventTime": "2018-12-25T20:56:52Z", "eventName": "ListDistributions", "eventSource": "cloudfront.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "dccf11e7-f730-45c7-8e2b-08b0da59fae5", "record_id": "flaws_cloudtrail:0000581:dccf11e7-f730-45c7-8e2b-08b0da59fae5", "row_index": 581, "timestamp": "2018-12-25T20:56:53Z", "event_type": "ListSAMLProviders", "event_source": "iam.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 701, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "dccf11e7-f730-45c7-8e2b-08b0da59fae5", "eventTime": "2018-12-25T20:56:53Z", "eventName": "ListSAMLProviders", "eventSource": "iam.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "responseElements": {"sAMLProviderList": []}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c3a79c87-c8ac-40d7-95bb-4de1f5e09d2b", "record_id": "flaws_cloudtrail:0000582:c3a79c87-c8ac-40d7-95bb-4de1f5e09d2b", "row_index": 582, "timestamp": "2018-12-25T20:56:54Z", "event_type": "ListBuckets", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-east-1"}, "resource_arns": [], "raw_record_size_bytes": 656, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c3a79c87-c8ac-40d7-95bb-4de1f5e09d2b", "eventTime": "2018-12-25T20:56:54Z", "eventName": "ListBuckets", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-east-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e6c6c4f3-6f2b-4bdf-a0b6-da989445b5e5", "record_id": "flaws_cloudtrail:0000583:e6c6c4f3-6f2b-4bdf-a0b6-da989445b5e5", "row_index": 583, "timestamp": "2018-12-25T20:56:56Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e6c6c4f3-6f2b-4bdf-a0b6-da989445b5e5", "eventTime": "2018-12-25T20:56:56Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "3624b312-850c-4bd6-8ff8-879eaa4a3d5e", "record_id": "flaws_cloudtrail:0000584:3624b312-850c-4bd6-8ff8-879eaa4a3d5e", "row_index": 584, "timestamp": "2018-12-25T20:56:58Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "3624b312-850c-4bd6-8ff8-879eaa4a3d5e", "eventTime": "2018-12-25T20:56:58Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "b5677c799b465420d8e7b0a6689a0bb0c4afbc9e.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "16dc0142-ffca-4801-bca7-86a25e33867", "record_id": "flaws_cloudtrail:0000585:16dc0142-ffca-4801-bca7-86a25e33867", "row_index": 585, "timestamp": "2018-12-25T20:56:58Z", "event_type": "GetRestApis", "event_source": "apigateway.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.15.33 Python/2.7.9 Windows/8 botocore/1.10.33", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 695, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "readOnly", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "16dc0142-ffca-4801-bca7-86a25e33867", "eventTime": "2018-12-25T20:56:58Z", "eventName": "GetRestApis", "eventSource": "apigateway.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.15.33 Python/2.7.9 Windows/8 botocore/1.10.33", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"template": false}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "9903c15d-aa03-438d-a011-efd1208aa215", "record_id": "flaws_cloudtrail:0000586:9903c15d-aa03-438d-a011-efd1208aa215", "row_index": 586, "timestamp": "2018-12-25T20:57:00Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 854, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "9903c15d-aa03-438d-a011-efd1208aa215", "eventTime": "2018-12-25T20:57:00Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "config-bucket-e11723be76de"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d4174e3-3a01-4e41-8b07-fccc405d27fb", "record_id": "flaws_cloudtrail:0000587:0d4174e3-3a01-4e41-8b07-fccc405d27fb", "row_index": 587, "timestamp": "2018-12-25T20:57:03Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 797, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d4174e3-3a01-4e41-8b07-fccc405d27fb", "eventTime": "2018-12-25T20:57:03Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "NoSuchBucketPolicy", "errorMessage": "The bucket policy does not exist", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "config-bucket-e11723be76de", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "daa4d7fa-1147-4ec5-8f22-d0c07cdeb76b", "record_id": "flaws_cloudtrail:0000588:daa4d7fa-1147-4ec5-8f22-d0c07cdeb76b", "row_index": 588, "timestamp": "2018-12-25T20:57:05Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "daa4d7fa-1147-4ec5-8f22-d0c07cdeb76b", "eventTime": "2018-12-25T20:57:05Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "flaws-logs"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "1ae970dc-4634-4eaa-8ad1-49de99afe76e", "record_id": "flaws_cloudtrail:0000589:1ae970dc-4634-4eaa-8ad1-49de99afe76e", "row_index": 589, "timestamp": "2018-12-25T20:57:07Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "1ae970dc-4634-4eaa-8ad1-49de99afe76e", "eventTime": "2018-12-25T20:57:07Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws-logs", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "98495df-514e-476a-96e7-68ef5f2e2150", "record_id": "flaws_cloudtrail:0000590:98495df-514e-476a-96e7-68ef5f2e2150", "row_index": 590, "timestamp": "2018-12-25T20:57:09Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 838, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "98495df-514e-476a-96e7-68ef5f2e2150", "eventTime": "2018-12-25T20:57:09Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "2a268bf0-0370-43a9-8ad9-bcf2a5be64e8", "record_id": "flaws_cloudtrail:0000591:2a268bf0-0370-43a9-8ad9-bcf2a5be64e8", "row_index": 591, "timestamp": "2018-12-25T20:57:11Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 698, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "2a268bf0-0370-43a9-8ad9-bcf2a5be64e8", "eventTime": "2018-12-25T20:57:11Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "02dc7a9f-5422-4dae-a16e-b6106a68f45d", "record_id": "flaws_cloudtrail:0000592:02dc7a9f-5422-4dae-a16e-b6106a68f45d", "row_index": 592, "timestamp": "2018-12-25T20:57:13Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "02dc7a9f-5422-4dae-a16e-b6106a68f45d", "eventTime": "2018-12-25T20:57:13Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "c02b9c07-abc2-409a-b295-ec59ac4e11af", "record_id": "flaws_cloudtrail:0000593:c02b9c07-abc2-409a-b295-ec59ac4e11af", "row_index": 593, "timestamp": "2018-12-25T20:57:15Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "c02b9c07-abc2-409a-b295-ec59ac4e11af", "eventTime": "2018-12-25T20:57:15Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level2-295510a051f3fcd006ae345973478972.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f945caea-15df-42e8-b5e8-926f36d508f5", "record_id": "flaws_cloudtrail:0000594:f945caea-15df-42e8-b5e8-926f36d508f5", "row_index": 594, "timestamp": "2018-12-25T20:57:17Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f945caea-15df-42e8-b5e8-926f36d508f5", "eventTime": "2018-12-25T20:57:17Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aceca7cf-fd82-43cf-9bce-540a3ac76b48", "record_id": "flaws_cloudtrail:0000595:aceca7cf-fd82-43cf-9bce-540a3ac76b48", "row_index": 595, "timestamp": "2018-12-25T20:57:19Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 738, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aceca7cf-fd82-43cf-9bce-540a3ac76b48", "eventTime": "2018-12-25T20:57:19Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level3-2644b9e749c3d14e400f847199800c14.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "6e5d0084-7c04-4535-ac93-862298bd43fe2", "record_id": "flaws_cloudtrail:0000596:6e5d0084-7c04-4535-ac93-862298bd43fe2", "row_index": 596, "timestamp": "2018-12-25T20:57:21Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 880, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "6e5d0084-7c04-4535-ac93-862298bd43fe2", "eventTime": "2018-12-25T20:57:21Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "8115b4ea-b762-4034-bbe4-cfebccd3229e", "record_id": "flaws_cloudtrail:0000597:8115b4ea-b762-4034-bbe4-cfebccd3229e", "row_index": 597, "timestamp": "2018-12-25T20:57:23Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "8115b4ea-b762-4034-bbe4-cfebccd3229e", "eventTime": "2018-12-25T20:57:23Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level4-974134b52e7c35aebcc4b45f19113936.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "f9c3dc2f-16f2-4596-b64f-a87f5f513e99", "record_id": "flaws_cloudtrail:0000598:f9c3dc2f-16f2-4596-b64f-a87f5f513e99", "row_index": 598, "timestamp": "2018-12-25T20:57:25Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "f9c3dc2f-16f2-4596-b64f-a87f5f513e99", "eventTime": "2018-12-25T20:57:25Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "a28ccfe1-8fe9-4ae6-ad31-f7aeac2876fd", "record_id": "flaws_cloudtrail:0000599:a28ccfe1-8fe9-4ae6-ad31-f7aeac2876fd", "row_index": 599, "timestamp": "2018-12-25T20:57:27Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "a28ccfe1-8fe9-4ae6-ad31-f7aeac2876fd", "eventTime": "2018-12-25T20:57:27Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level5-8dbc21dbbd6129208d054061ef063f04.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "959e5a95-48d7-48ed-9158-2a39f62020c1", "record_id": "flaws_cloudtrail:0000600:959e5a95-48d7-48ed-9158-2a39f62020c1", "row_index": 600, "timestamp": "2018-12-25T20:57:30Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "959e5a95-48d7-48ed-9158-2a39f62020c1", "eventTime": "2018-12-25T20:57:30Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "46fb3126-1d3c-47e7-ae32-53a153e20b39", "record_id": "flaws_cloudtrail:0000601:46fb3126-1d3c-47e7-ae32-53a153e20b39", "row_index": 601, "timestamp": "2018-12-25T20:57:32Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 739, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "46fb3126-1d3c-47e7-ae32-53a153e20b39", "eventTime": "2018-12-25T20:57:32Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "level6-588e81908c84e62a6dd8202d535469dd.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "aad56eb1-41b1-4e93-bf63-6502f1b154ea", "record_id": "flaws_cloudtrail:0000602:aad56eb1-41b1-4e93-bf63-6502f1b154ea", "row_index": 602, "timestamp": "2018-12-25T20:57:34Z", "event_type": "GetBucketEncryption", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 879, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "errorCode", "errorMessage", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "aad56eb1-41b1-4e93-bf63-6502f1b154ea", "eventTime": "2018-12-25T20:57:34Z", "eventName": "GetBucketEncryption", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "errorCode": "ServerSideEncryptionConfigurationNotFoundError", "errorMessage": "The server side encryption configuration was not found", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"encryption": [""], "bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud"}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "e219446-5a29-4073-9eb3-aa568ed0e117", "record_id": "flaws_cloudtrail:0000603:e219446-5a29-4073-9eb3-aa568ed0e117", "row_index": 603, "timestamp": "2018-12-25T20:57:35Z", "event_type": "GetBucketPolicy", "event_source": "s3.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "aws_region": "us-west-2"}, "resource_arns": [], "raw_record_size_bytes": 737, "raw_record_depth": 3, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "e219446-5a29-4073-9eb3-aa568ed0e117", "eventTime": "2018-12-25T20:57:35Z", "eventName": "GetBucketPolicy", "eventSource": "s3.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "[aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71]", "awsRegion": "us-west-2", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "requestParameters": {"bucketName": "theend-c1aad500c62e2a57cf12cebf93b282cf.flaws.cloud", "policy": [""]}, "resources": []}}
{"benchmark_source": "flaws_cloudtrail", "source_record_id": "0d57db5d-511b-4ae0-b3e0-bdd554c7e689", "record_id": "flaws_cloudtrail:0000604:0d57db5d-511b-4ae0-b3e0-bdd554c7e689", "row_index": 604, "timestamp": "2018-12-25T20:57:37Z", "event_type": "DescribeDBInstances", "event_source": "rds.amazonaws.com", "principal": {"type": "IAMUser", "arn": "arn:aws:iam::811596193553:user/Level6", "account_id": "811596193553", "principal_id": "AIDADO2GQD0K8TEF7KW1V", "user_name": "Level6", "access_key_id": "AKIA3Z2XBVUDFQ9TU4MD", "session_issuer_arn": null, "session_issuer_user_name": null}, "network": {"source_ip": "132.137.102.64", "user_agent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "aws_region": "ap-south-1"}, "resource_arns": [], "raw_record_size_bytes": 684, "raw_record_depth": 2, "raw_record_top_level_keys": ["awsRegion", "eventID", "eventName", "eventSource", "eventTime", "eventType", "eventVersion", "recipientAccountId", "requestID", "requestParameters", "responseElements", "sourceIPAddress", "userAgent", "userIdentity"], "raw_record": {"eventID": "0d57db5d-511b-4ae0-b3e0-bdd554c7e689", "eventTime": "2018-12-25T20:57:37Z", "eventName": "DescribeDBInstances", "eventSource": "rds.amazonaws.com", "eventType": "AwsApiCall", "sourceIPAddress": "132.137.102.64", "userAgent": "aws-cli/1.16.81 Python/3.7.2rc1 Linux/4.9.125-linuxkit botocore/1.12.71", "awsRegion": "ap-south-1", "userIdentity": {"type": "IAMUser", "principalId": "AIDADO2GQD0K8TEF7KW1V", "arn": "arn:aws:iam::811596193553:user/Level6", "accountId": "811596193553", "accessKeyId": "AKIA3Z2XBVUDFQ9TU4MD", "userName": "Level6"}, "resources": []}}